Your iCloud, your keys
VaultBe does not run storage servers. Backups go to the private part of your own iCloud account through Apple's CloudKit. What arrives there is exactly what is on your phone's disk: files already encrypted with AES-256-GCM. Apple never receives your pattern, your recovery phrase or any key.
Built to give away as little as possible
- Padded sizes. Encrypted files are padded so their size reveals very little about what is inside.
- Unlinkable names. Each record is named with a keyed hash, so nothing in iCloud says which records belong together or what they contain.
- No plaintext metadata. File names, dates, folders and thumbnails live inside the encrypted index.
Restoring on a new iPhone
Install VaultBe, sign in to the same iCloud account and draw your pattern. VaultBe finds the vault's header in iCloud, unlocks it with your pattern and downloads your files. If you have forgotten the pattern, the recovery phrase does the same job. Step-by-step instructions are in Restore your vault on a new iPhone.
One thing worth knowing
On your device, the vault key is protected by your pattern and a secret stored in the iPhone's Keychain. A backup has to be restorable on a different device, so in iCloud it is protected by your pattern alone. A longer pattern therefore protects your backup better.
You stay in control
Backup is switched on per vault. You can run it on Wi-Fi only, turn it off, or delete a vault's backup entirely. If your iCloud storage is full, VaultBe tells you rather than failing silently.
Common questions
Can Apple see my backed-up photos?
No. Files are encrypted on your iPhone before upload and the keys never leave your devices. Apple stores ciphertext it cannot read.
Does backup count against my iCloud storage?
Yes. Backups are stored in your own iCloud account and use your iCloud storage quota.