AES-256 · ENCRYPTED ON YOUR IPHONE · NO ACCOUNT
Hidden isn’t private.
Encrypted is.
Sanctum moves your photos, videos and files into a vault only your pattern can open. Encrypted on your iPhone, backed up privately, never seen by us.
Sanctum is an iPhone app
Point your iPhone camera at the code to get it — no account needed.
The long way
After the sunWhat does “encrypted on your iPhone” mean?
Your files are encrypted before they are stored. Privacy is built into how Sanctum works, not promised in a policy.
Pattern encryption
Draw a shape on a 5×5 grid. 600,000 rounds of PBKDF2 and a secret kept in this iPhone’s Keychain turn it into the key that unwraps a random 256-bit vault key.
Learn moreRecovery code
Every vault gets a 256-bit recovery code. It opens a separate encrypted copy of the vault key, so a forgotten pattern never means lost photos, and nobody else holds a key.
Learn moreHidden vaults
Each pattern opens its own encrypted vault, and there is no list of vaults anywhere. The screen shows only the vault you opened; what storage can still reveal is documented.
Learn moreSecurity model
We don’t ask for trust. We show the maths.
- AES-256-GCM encryption for files, thumbnails and albums
- PBKDF2-HMAC-SHA512 pattern key derivation, 600,000 rounds
- Device-bound keys that need this iPhone’s Keychain
- Client-side encryption before anything reaches iCloud
const vault = {
cipher: "AES-256-GCM",
vault_key: random_256_bit, // not your pattern
kdf: "PBKDF2-HMAC-SHA512",
iterations: 600000,
salt: random_per_vault,
device_bound: true, // this iPhone only
icloud_backup: true, // default, can be off
};
// We run no servers that receive your files or keys.
// Only your pattern or recovery code decrypts.Someone takes your phone.
Now what?
Most vault apps prove you have something to hide. A locked folder with a list of vaults is an invitation to keep looking.
Sanctum does not open to a list of vaults. Each pattern opens its own encrypted vault. Draw a decoy or duress pattern and a real vault opens, while what your iPhone’s storage could still reveal stays documented.
Separate what the screen shows from what the device holds.