Photo Vaults That Work Offline, With No Account

1. What no account actually means

An account is a record on a server that knows who you are. Everything a cloud vault can do for you comes from that record. So does everything it can do to you. Remove it and four things are true at once:

• There is no server that knows you. No email address, no user ID, no record of when you open the app.
• There is nothing to reset. A forgotten password is permanent, because nobody holds a second copy of the key.
• There is nothing to breach. No list of users to leak, and no account to phish or take over.
• There is nothing to hand over. A developer with no copy of your data and no key to it has nothing to give, whoever asks.

Those are one design choice seen from four sides. The second is the cost, and the other three are the benefit. You cannot have the three without the one.

2. The Airplane Mode test

Most claims about a vault app can only be read. This one can be run.

1. Install the app and set it up.
2. Turn on Airplane Mode, and check that Wi-Fi is off too.
3. Create a vault, add photos, lock, unlock, view, export.

An app that does all of that with no connection is not uploading anything while you are offline. That is something you saw, not something you were told. It also rules out a whole design: an app that needs a server to work will fail at step 3.

3. What you give up

A page that only listed the benefits would be marketing. These are real, and for some people they decide it.

• No sync. The vault is on one phone. An iPad or a second phone does not see it unless you export and import.
• No automatic copy off the phone. Lose the phone without an export and the vault is gone. The habit that covers this is yours to keep, not the app's.
• No recovery. Forget the password and nobody can get the contents back. This is the most common way people lose photos in an encrypted vault, and it is far more likely than any attack. What that means in practice is worth reading before you rely on one.
• Nobody to call. Support can explain the app. It cannot open your vault, because the ability does not exist.

A vault with an account trades all four the other way. Neither is the wrong choice. The four kinds of app are set out so you can pick knowingly.

4. How Obscura Photo Vault does it

Ours, so read this as coming from an interested party. The facts can be checked in the ways described above and in the security paper.

• No account. Setup is a password. There is no sign-up screen because there is nothing to sign up to.
• No internet needed. No vault function requires a connection. Buying or restoring Pro goes through the App Store, as purchases do for every app.
• No server. Photos, videos and the database are encrypted on the phone with AES-256-GCM, using a key made from your password through 600,000 rounds of PBKDF2, and they stay on the phone.
• Data Not Collected on the App Store privacy label. No analytics, no usage reporting. This is a form we filled in about our own software, not a certificate anyone issued. It deserves the same doubt as anyone else's.
• Export for backup. A vault exports to a single encrypted file, protected with the same encryption and the same password process as the vault itself. So it is safe to keep in cloud storage or on a computer. Import it on a new phone and the vault is back. How that works alongside a device backup is in deleting or moving a vault app.

For the record, we do not claim to be the only app built this way. Others in this category are too. The ranked comparison reports what each one publishes.

5. What offline does not protect against

Having no server removes one whole group of risks. It leaves the others exactly where they were.

• A phone compromised while the vault is open. The key and the readable photo are in memory so they can be shown. No server involved, no server needed.
• Someone who knows your password. Offline changes nothing about this.
• Device backups. An iCloud or computer backup of the phone includes app data. For an encrypted vault that data is scrambled and needs the password. But it exists, in a place you may not think of as the vault.
• The originals. The photo you imported is still in Photos, then in Recently Deleted, then in iCloud Photos until the deletion catches up. The vault's offline design does not reach into any of those.
• The app being visible. Installed apps show in Settings and in purchase history whatever they do with the internet.

That is why "offline" is one property among several, not a verdict. Are photo vault apps safe covers the rest.

6. Common questions

Is there a photo vault app that does not need an account?

Yes. Obscura Photo Vault has no sign-up and no server. You set a password and the app works from then on with no internet connection. Other apps in this category are built the same way. The App Store listing is where to check, since an account requirement is always stated. Any app you can use fully in Airplane Mode is not uploading while offline.

Do offline photo vault apps upload your photos?

An app with no server has nowhere to upload to, and that is the claim you can test: turn on Airplane Mode and use it. What the test does not prove is what an app does when online, or what its privacy label says, which is the developer's own answer. Read the label as well as running the test.

What do you give up with an offline vault?

Sync between devices. A copy that survives a lost phone, unless you export one yourself. And any password reset, because there is no account to send one to. Those are the same facts as no server and no data collection, seen from the other side.

Does Obscura Photo Vault collect any data?

Its App Store privacy label says Data Not Collected. The app has no analytics, no usage reporting and no server. That label is our own answer and nobody audits it, same as every developer's. The part you can check yourself is that the app works with no connection at all.

Can an offline vault still be backed up?

Yes, in two ways. An encrypted export file can be kept anywhere, including cloud storage, because without the password it cannot be read. And an iCloud or computer backup of the phone carries the app's data across as already-encrypted files. They still need the vault password on the new phone.