ENCRYPTED ON YOUR DEVICE · NO ACCOUNT
Everything private,
behind one passcode.
An AES-256 encrypted vault for photos, videos, files, notes, passwords, bank cards and private contacts. Everything is encrypted on your phone before it is written to disk, and there is no account to sign in to.
- 100% encrypted on your device
- No account, no server
- No backdoor
Tap to enter your passcode
Enter your 4-digit passcode
INSIDE THE VAULT
Not just a promise — this is the real interface
Real screens from inside the app: the 8 private areas, passwords, encryption, and the protections that kick in under pressure.
We hide nothing from you
Lockboxy opens on a lock screen and asks for your passcode. That is the whole entrance: one code, one vault.
If you would rather the app were less conspicuous on a shared phone, you can change what it opens to — a working calculator, notes app, weather app or set of tools — under Settings › Security › “Opening screen”. It is off unless you turn it on, the screen that offers it explains exactly what each option does and which field your passcode goes into, and you can switch back at any time. We would rather tell you this here than have you discover it.
Everything you put inside is encrypted with AES-256 on the device before it touches storage. The key is derived from your passcode, which we never receive and never store — so the vault is unreadable to anyone who does not know the code, including us.
Deliberately upfront
We say this plainly everywhere — on the App Store, on this page, and on the lock screen itself: Lockboxy is a private vault. If you forget your passcode and have not set up a Recovery Key, nobody can open it, and that includes us.
8 AREAS INSIDE THE VAULT
Everything private, in one vault
Each area is encrypted independently — photos, files, notes, passwords, even metadata like file names.
Photos & Videos
Hide directly from the camera, your library, or the Share Sheet, or turn on Auto-Hide Screenshots to sweep new ones in automatically — camera captures never pass through the Photos app.
Files
Lock any file type: PDFs, contracts, ID scans, archives — import via the file picker or Share Sheet.
Wallet
Bank cards, passwords, WiFi, a live 2FA code generator, crypto seed phrases — every field encrypted individually, plus breach checks for saved passwords.
Private Notes
Encrypted journal and notes, autosaved, searchable by month and year.
Private Browser
Browse the web inside the vault — history and cookies never leave the encrypted area.
Audio
Record voice memos straight into the vault, import existing files, or share them in from any app.
Private Contacts
Sensitive contacts kept entirely separate from your phone's address book.
Web Shortcuts
Quick access to WhatsApp Web, Messenger, Telegram, and more — right inside the vault.
These are web shortcuts, not clones of the original apps.
THE ENCRYPTION PIPELINE
From your passcode to a key nobody else holds
Every unlock goes through these exact 5 steps — no shortcuts.
- 1
Your secret passcode
Set by you — any length, and it never leaves your device.
- 2
Argon2id
Your passcode is hashed with Argon2id and a unique salt, resistant to brute-force attacks.
- 3
Master Key
A 256-bit key that exists only in memory, and is never written to disk.
- 4
Wrapping the data key (DEK)
The Master Key unwraps a random DEK — changing your passcode only re-wraps the DEK, never re-encrypts your files.
- 5
AES-256-GCM
Every file is encrypted in chunks, with a fresh nonce for every write.
More layers of defense
Self-destruct passcode
A second passcode instantly and permanently erases your vault the moment it's entered — no confirmation, no undo.
Increasing lockout delay
Each wrong passcode in a row makes the next attempt wait longer — from 1 second up to 2 minutes — a silent defense against anyone trying to guess their way in.
Intruder selfie
After 4 wrong attempts, the front camera silently captures a photo and timestamp — never uploaded anywhere.
Face ID / Touch ID
A safe shortcut — it just re-feeds your real passcode, never a side door around it.
Screenshot blocking
The vault automatically hides its content from screenshots and the app switcher.
No backdoor
Forgetting your passcode means permanent data loss — there's no “security question” to bypass it. Premium includes a one-time Recovery Key as your only sanctioned fallback.
PRICING
Free to start. Pay once to keep it forever.
No hidden renewal traps — every term is shown clearly on the purchase screen itself.
Free plan: hide up to 30 photos/videos and 10 files — enough to try the entire security core.
See Premium in detail →FAQ
The questions we want you to ask first
I forgot my passcode. Can it be recovered?
No — and that's intentional. The encryption key is derived from your passcode; we never store it and never receive it. There's no reset. Premium users can generate a Recovery Key in advance as a fallback.
Can anyone tell what is inside the vault without the passcode?
No. Everything is stored encrypted, including thumbnails and file names, and the key only exists while the vault is unlocked. Without the passcode there is nothing readable on disk.
What happens if someone keeps guessing my passcode?
Each wrong attempt makes the next one wait longer, up to a couple of minutes. Premium can also take an intruder photo and video on a failed attempt, and log every try with a timestamp.
Can I share photos, videos, files, or audio into the vault from other apps?
Yes — select item(s) in Photos, Files, Voice Memos, or any other app, tap Share, then choose Lockboxy. They are saved encrypted and waiting in Media, Files, or Audio the next time you open the vault — no need to open Lockboxy first. iOS only for now; Android support is planned.
Are the web shortcuts real clones of WhatsApp or Messenger?
No. They're shortcuts that open the web version of those services inside the vault's private browser — not clones of the original apps.
Is any of my data sent to a server?
No. Lockboxy has no account and no server. Everything stays on your device, encrypted.
Does it need an internet connection?
No. The vault itself works fully offline. A connection is only needed for the private browser or web shortcuts.
Does Premium come with ads?
No — Premium removes ads entirely. The free plan shows occasional ads: an interstitial when you lock the vault, and an optional rewarded ad to unlock extra free storage slots.
Start protecting what's actually yours
Get Lockboxy today — setting your first passcode takes under a minute.
Available now on the App Store. Android is still in the works.