Do Photo Vault Apps Back Up to iCloud?
It depends on the app. Vault photos live inside the app, not in your Photos library, so iCloud Photos never syncs them. Whether they reach iCloud depends on the app's own backup and on iCloud Backup.
Try Cryptile free: join the beta on TestFlight
What do I need to know?
- iCloud Photos does not see vault photos. They are app data, not library photos.
- iCloud Backup can include app data. Apple says it covers data for downloaded apps that don't sync with iCloud.
- Ask who holds the key. A backup is only private if it is encrypted before it leaves your phone.
Where do vault photos actually live?
On your iPhone, inside the app's own storage. That is why deleting the app deletes them from the phone. Apple says: "Deleting an app removes it and its data from your iPhone."
From there, a copy can reach iCloud in two ways:
- The app's own iCloud storage. The app saves its files to your iCloud account itself.
- iCloud Backup. Apple says it includes "App data" for downloaded apps that don't sync with iCloud. Whether a given vault's files are in it is up to the app, so ask.
Sources: Apple, What does iCloud back up? and Apple, Remove or delete apps.
What should I check in any vault app?
- Does it back up at all? Some keep photos only on the phone. Lose the phone and they are gone.
- Where does the backup go? Your iCloud account, or the company's own server.
- Is the backup encrypted before upload? If not, it is as readable as the provider allows.
- How do you restore? A phrase, an email account or a support ticket each say something about who can get in.
- Is there a free test? Back up a few photos, then restore on another device before you trust it.
How does Cryptile back up?
Cryptile has an encrypted iCloud backup, included on the free plan. Each file is AES-256-GCM ciphertext before it is uploaded. Apple stores ciphertext and recovery salts, not keys.
Restoring on a new phone needs the vault's 9-word recovery phrase. There is no account and no reset. Each vault has its own phrase, so decoy vaults stay believable.
What if I use Advanced Data Protection?
Apple's Advanced Data Protection makes iCloud Backup end-to-end encrypted. That helps for apps whose data lands in iCloud Backup unencrypted. For Cryptile it adds a second layer, since the files are already ciphertext. See Apple, iCloud data security overview.
What this doesn't protect against
A backup is only as safe as its recovery method. If you lose both your Cryptile pattern and the recovery phrase, the vault is gone. A backup does not protect a vault that is open on an unlocked phone. Sync between devices is coming and is not available yet.
Do it with Cryptile
Cryptile's keys are derived on your device, and the developer never holds them. The source of the core is published for audit.
Cryptile is free for up to 2 vaults, 100 photos and 10 videos in total, with encrypted iCloud backup. Plus removes the limits for $19.99 a year (7-day free trial) or $39.99 once.