I've been working on a photo vault for iPhone and Android and it's finally out, so I'd love some honest feedback. The thing that bugged me about most vault apps: the key comes from the unlock pattern alone, and a pattern is basically a short password. If someone copies the phone's storage or the cloud backup, they can brute force every pattern on a laptop in no time. In Hidewell the pattern unlocks a key that's tied to the phone's security chip (Secure Enclave on iPhone, StrongBox on Android). So every guess has to happen on that phone, one at a time. Other bits: Each pattern opens its own vault, and there's no list of vaults anywhere Secure camera that encrypts as you shoot, and videos play straight from the encrypted file Backups go to your own iCloud Drive or Google Drive, keyed from a 12-word recovery phrase No account, no analytics, the app doesn't talk to my servers Trade-offs I chose on purpose: no Face ID or fingerprint, only the pattern. And if you lose both the pattern and the recovery phrase, nobody can get your files back, including me. The encryption core is open source in Rust: https://github.com/hidewell-oss/hidewell-core Free tier is one vault and 200 items, Pro adds more vaults, LiveSync between your devices, and a duress pattern. https://hidewell.app Mostly curious whether the setup makes sense to someone seeing it for the first time, and what would stop you switching from whatever you use now.   submitted by   /u/harkalos [link]   [comments]