Search the App Store for "photo vault" and you will find dozens of apps dressed up as calculators. The idea is appealing: nobody opens a calculator looking for secrets. The trouble is that a disguise and a lock are different things, and many of these apps only have the first.
Two separate questions
- Can someone tell the app is a vault? That is disguise.
- If they can, are the files still protected? That is encryption.
A disguise answers the first question. It does nothing for the second. Anyone who recognises the app, reads its name in Settings, or simply looks it up, is past the disguise.
What "protected by a PIN" often means
In a weakly built vault app, your photos are stored as normal image files in the app's folder. The PIN screen is a door painted on a wall: the app checks the number and then shows the files. The files themselves were never changed. A backup of the phone, or a tool that reads app storage, shows them as they are.
In an encrypted vault, the files on disk are ciphertext. The secret you enter is not compared against a stored answer; it is used to compute the key. Without it, there is nothing to show.
Five questions to ask of any vault app
- Which cipher, and is it applied to the files themselves? Look for AES-256-GCM or ChaCha20-Poly1305, stated plainly.
- How is the key derived? A short PIN needs a slow, memory-hard function such as Argon2id to resist guessing.
- Can the company reset your access? If they can, they, or someone who compels them, can get in.
- Where do backups go, and who holds the keys? "Cloud backup" without client-side encryption means your photos sit readable on someone's server.
- What does the app collect? Ads and analytics SDKs inside a privacy app are a bad sign.
How VaultBe approaches it
VaultBe does have a Disguise Mode, with a working calculator, converter and notes app. We think of it as a curtain in front of a safe. Behind the secret code is the pattern screen, and behind that is AES-256-GCM encryption with an Argon2id-derived key. If the curtain is pulled aside, the safe is still shut.
That order matters. Encryption first, disguise second.