You pass your phone to a friend to show one photo, or to a stranger who needs to make a call, or at a checkpoint. It's already unlocked. The camera roll — and whatever's in it — is a swipe away.
Why "unlocked" is the risky moment
Face ID and your passcode protect a locked phone. But the everyday risk isn't a locked phone being cracked — it's an unlocked one being handed over and casually scrolled. Anything in your main Photos library is right there. The things you'd least like seen are usually sitting alongside the ones you meant to show.
How Kistvault handles it
- A separate lock. Your private photos and documents live in the Kistvault vault, not the camera roll — so scrolling Photos never wanders into them.
- Its own credential. Even on an unlocked phone, opening the vault needs your Kistvault password or pattern. Handing over the phone doesn't hand over the vault.
- Nothing leaking in previews. Because the content is encrypted at rest in its own container, it isn't surfaced by the system photo picker or search.
Said honestly
Kistvault's protection here is a genuine second lock, not a magic trick. It doesn't today offer a decoy or duress mode — a feature that shows a fake vault under a different credential — which some vaults market; that's a possible future addition, not a current claim. What Kistvault gives you now is simple and real: the sensitive stuff isn't in the roll, and the vault stays shut without your credential.