Encrypt My Data

Security

Last updated: 2026-09-12

Protection should be understandable. Here is what the app does, and where your choices still matter.

Encryption on the device

The vault database and individual images are encrypted using AES-256-GCM through Apple's CryptoKit. The vault key is protected with a key derived from the master password using PBKDF2-HMAC-SHA256. The app uses Apple's cryptographic frameworks rather than a custom encryption algorithm.

While unlocked, the working database is held in memory. Locking closes the working database and releases the session's key references. Swift, CryptoKit and iOS do not provide a guarantee that every temporary memory copy is overwritten.

Automatic locking and hidden fields

Automatic locking, masked secret fields and an expiring clipboard reduce everyday exposure. The app obscures vault views when it is inactive or detects screen capture. These measures are not protection against every form of recording or a compromised operating system.

Backups and sharing

Encrypted backups require the associated master password. Restoring validates the main vault database and its referenced original images before replacement. Temporary thumbnails are derived data. Older backup formats have limits: restoring a separate decoy vault validates its encrypted structure, but its contents are authenticated when it is opened with its own password.

A valid older backup cannot be cryptographically distinguished from the newest one. Keep track of the backups you trust. When you share without encryption, the destination receives readable information. Metadata removal for shared images is enabled by default and sharing fails if requested removal cannot be completed.

Optional Password AutoFill

AutoFill has a separate encrypted copy of saved website logins and a dedicated biometric-protected key. It does not give the extension the main vault key, master password or draft contents. The provider matches saved and requested hostnames exactly and asks for confirmation before filling. Always check the destination shown before sharing credentials.

What we cannot promise

There is no master-password reset service. Encryption cannot protect information after you deliberately reveal or export it, and cannot guarantee safety on a compromised device. Deletion is not a promise of forensic overwriting of flash storage, remote copies or old backups.

We do not claim an independent security certification or that the app is “unbreakable”. Keep iOS and the app updated, choose a strong master password and test your backup workflow.

Report a problem

Contact hello@encryptmydata.net with “Security report” in the subject. Use invented data in reproduction steps. Do not send real passwords, private vault files or another person's information.