Launching today
Hidewell Photo Vault
Photo vault where your pattern only works on your phone
3 followers
Photo vault where your pattern only works on your phone
3 followers
An encrypted photo and video vault for iPhone and Android. Files are encrypted on your phone with AES-256, and your pattern unlocks a key bound to the phone's security chip, so guesses can't be run on another computer. Each pattern opens its own vault. Backups go to your own iCloud Drive or Google Drive, keyed from a 12-word recovery phrase. No account, no analytics.
Hi Product Hunt, I'm Harry, and I made Hidewell Photo Vault.
I built it because most photo vaults I looked at derive their key from the pattern alone, and a pattern is a short password. If someone copies the phone's storage or the cloud backup, they can try every pattern on a fast computer.
In Hidewell, your pattern unlocks a key tied to your phone's security chip (Secure Enclave on iPhone, StrongBox on Android). Every guess has to run on that phone, one at a time.
What it does today:
- Each pattern opens its own vault, and there's no vault list on screen or on disk
- A secure camera that encrypts photos and video as you shoot
- Videos play straight from the encrypted file
- Albums and tags, with originals kept at full quality (Live Photos, RAW, HEIC)
- Encrypted backup to your own iCloud Drive or Google Drive, keyed from a 12-word recovery phrase
- A duress pattern that opens a decoy vault and cuts off access to your other vaults on that phone (Pro)
There's no account, no analytics, and the app doesn't connect to my servers. The encryption core is open source in Rust: https://github.com/hidewell-oss/.... The app itself isn't. The core has a published security review, but I want to be clear that it was done by an AI model, not a human audit firm.
Free gives you one vault and up to 200 items. Pro is $2.99/month, $19.99/year or $44.99 lifetime (USD), and adds more vaults, the duress pattern, alternate icons and LiveSync.
Two trade-offs I chose on purpose: there's no Face ID or fingerprint unlock, only the pattern. And if you lose both your pattern and your recovery phrase, nobody can recover your files, including me.
If you use Keepsafe or another vault now, I'd especially like to hear what you'd miss if you switched, and anything in setup that feels confusing.