arkwarden.app

mx

mail.protonmail.ch

mailsec.protonmail.ch

ns

fortaleza.ns.porkbun.com

maceio.ns.porkbun.com

salvador.ns.porkbun.com

curitiba.ns.porkbun.com

caa

txt

protonmail-verification=42451fbe066997106dfd740d4ed2681604058e02

v=spf1 include:_spf.protonmail.ch ~all

google-site-verification=Qnc18cqrFKVkkyeB9IIl-96pPZu2ohEi0oZB-KzUFnI

dmarc

v=DMARC1; p=quarantine

User-agent: *
Allow: /

Sitemap: https://arkwarden.app/sitemap.xml

# ArkWarden

> An encrypted photo and file vault for iPhone. Each file is encrypted on the
> device with AES-256-GCM. The vault opens with a drawn pattern or a recovery
> phrase you hold. There is no ArkWarden account and no ArkWarden server.

ArkWarden is an iOS app ([App Store](https://apps.apple.com/app/id6777033926), ID 6777033926). The encryption core is published on [GitHub](https://github.com/ArkWardenApp/ArkWarden). Files are encrypted individually on-device. The master key is a random 256-bit key unlocked by a pattern, never transmitted. An optional encrypted backup (iCloud or a file) is off by default and is encrypted on the device before it leaves the phone. A registered YubiKey can be added as a second factor over NFC.

Site: https://arkwarden.app. English, Spanish (/es/), and German (/de/). Full URL list: https://arkwarden.app/sitemap.xml

## Guides

- [How to Lock Photos on iPhone](https://arkwarden.app/guides/lock-photos-iphone): On iOS 18 and later, the Photos app can require Face ID, Touch ID, or the device passcode. The lock is local to that iPhone. Apple does not document a separate vault key. Compares the app lock, Apple's Hidden album, Google Photos Locked Folder, and an encrypted vault.
- [How to Lock a Folder on iPhone](https://arkwarden.app/guides/password-protect-folder-on-iphone): Files has no per-folder password. On iOS 18 and later, the closest native option is locking the whole Files app with Face ID, Touch ID, or the device passcode. ArkWarden provides folders inside each category for organizing files the vault already encrypts; folders do not have separate passwords.
- [How to Hide, Unhide, and Find Hidden Photos on iPhone](https://arkwarden.app/guides/hidden-photos-iphone): Touch and hold a photo or video, then tap Hide, to move it to the Hidden album. To unhide it, open the Hidden album and tap Unhide. The Apple Hidden album adds no separate encryption key; it opens with the same Face ID, Touch ID, or passcode that unlocks the iPhone. ArkWarden encrypts every photo with AES-256-GCM under a key only a pattern or recovery phrase can unlock. Also covers finding the album (Photos → Collections → Utilities → Hidden, or Albums → Utilities on iOS 17 and earlier), restoring it if missing, and iCloud sync. Checked on physical iPhones running iOS 27 and iOS 26, September 2026.
- [Do Hidden Photos Sync or Back Up to iCloud?](https://arkwarden.app/guides/do-hidden-photos-sync-to-icloud): Yes, when iCloud Photos is on, and they transfer to a new iPhone still hidden. Covers the distinction between iCloud Photos sync and iCloud Backup, what Advanced Data Protection does and does not change, iCloud.com web access, and Shared Library participants. Sourced to Apple documentation.
- [Best Apps to Hide Photos on iPhone](https://arkwarden.app/guides/app-to-hide-photos): Five methods compared. Four of the five do not add a documented separate vault key. Only encryption changes the file so it stays unreadable without a key you hold.
- [Best Photo Vault Apps for iPhone](https://arkwarden.app/guides/best-photo-vault-apps-iphone): Seven apps downloaded, installed, and tested (last checked September 2026). Only 3 of the 7 name a specific encryption method for the files themselves; the other 4 either lock the screen only, or encrypt just an optional cloud backup, not the files themselves. ArkWarden is the only one that is open source and supports hardware YubiKey two-factor authentication. It also has no account and no server. Files are encrypted with AES-256-GCM under a random master key unlocked by a pattern (with the Secure Enclave) or a recovery phrase.

## How ArkWarden works

- [Encryption](https://arkwarden.app/encryption): AES-256-GCM per file, ChaCha20-Poly1305 for the index, PBKDF2 at 600,000 iterations with a vault-specific salt combined with a Secure Enclave secret.
- [Pattern unlock](https://arkwarden.app/pattern): The pattern runs through PBKDF2 and a Secure Enclave secret to unlock a random 256-bit master key. The pattern is never stored or sent. Face ID, PIN, and YubiKey are optional second factors after the pattern, not replacements for it.
- [Recovery phrase](https://arkwarden.app/recovery-phrase): 12 or 24 BIP-39 words, generated on device. Opens the vault if the pattern is forgotten, and is required to move a vault to a new iPhone.
- [YubiKey as second factor](https://arkwarden.app/2fa/yubikey): FIDO2 over NFC. Up to two keys per vault. Checked after a successful pattern, not instead of it.
- [Wing](https://arkwarden.app/wing): A second vault with its own separate pattern.
- [Backup and restore](https://arkwarden.app/backup-restore): Optional encrypted backup (iCloud or a file), off by default, encrypted on device first. Restore uses the recovery phrase.
- [On-device privacy](https://arkwarden.app/on-device-privacy): No ArkWarden account, no ArkWarden server, no personal identifier.
- [Security overview](https://arkwarden.app/security): Standards, architecture, and stated limits.
- [Open source](https://arkwarden.app/open-source): ArkWarden's core encryption code is open source and inspectable on GitHub. It covers the main vault's file encryption, master-key protection, and recovery path.

## Comparisons

- [vs Apple Hidden album](https://arkwarden.app/compare/apple-hidden-album): Apple does not document a separate Hidden album key independent of device authentication.
- [vs Keepsafe](https://arkwarden.app/compare/keepsafe): Keepsafe encrypts photos but is not zero-knowledge, by its own admission.
- [vs LockMyPix](https://arkwarden.app/compare/lockmypix): Encrypts files with AES-CTR. Recovery and Fake Vault can involve an account.
- [vs Private Photo Vault](https://arkwarden.app/compare/private-photo-vault): PIN-protected locally. AES-256 is documented for Cloud Vault backup only.
- [vs Calculator#](https://arkwarden.app/compare/calculator): Hides files with a disguised icon and a password.
- [vs SPV](https://arkwarden.app/compare/spv): Controls access with a PIN and does not name an encryption method.

## Spanish

The same pages in Spanish, under /es/.

- [Cómo bloquear fotos y fotos ocultas en el iPhone (2026)](https://arkwarden.app/es/guides/lock-photos-iphone)
- [Cómo bloquear una carpeta en el iPhone: qué funciona (2026)](https://arkwarden.app/es/guides/password-protect-folder-on-iphone)
- [Cómo ocultar, mostrar y encontrar fotos en el iPhone (2026)](https://arkwarden.app/es/guides/hidden-photos-iphone)
- [¿Las fotos ocultas se sincronizan o se guardan en iCloud? (2026)](https://arkwarden.app/es/guides/do-hidden-photos-sync-to-icloud)
- [Las mejores apps para ocultar fotos en iPhone (2026): qué protege cada tipo](https://arkwarden.app/es/guides/app-to-hide-photos)
- [Mejores bóvedas de fotos para iPhone: 7 apps probadas (2026)](https://arkwarden.app/es/guides/best-photo-vault-apps-iphone)
- [Cifrado](https://arkwarden.app/es/encryption)
- [Desbloqueo con patrón](https://arkwarden.app/es/pattern)
- [Frase de recuperación](https://arkwarden.app/es/recovery-phrase)
- [YubiKey](https://arkwarden.app/es/2fa/yubikey)
- [Wing](https://arkwarden.app/es/wing)
- [Copia de seguridad y restauración](https://arkwarden.app/es/backup-restore)
- [Privacidad en el dispositivo](https://arkwarden.app/es/on-device-privacy)
- [Resumen de seguridad](https://arkwarden.app/es/security)
- [Código abierto](https://arkwarden.app/es/open-source): El código de cifrado principal de ArkWarden es de código abierto y se puede revisar en GitHub. Incluye el cifrado de archivos, la protección de la clave maestra y la recuperación de la bóveda principal.
- [¿Es seguro el álbum oculto del iPhone? (vs ArkWarden)](https://arkwarden.app/es/compare/apple-hidden-album)
- [¿Es seguro Keepsafe? Keepsafe vs ArkWarden](https://arkwarden.app/es/compare/keepsafe)
- [¿Es seguro LockMyPix? LockMyPix vs ArkWarden](https://arkwarden.app/es/compare/lockmypix)
- [¿Es seguro Private Photo Vault? Comparado con ArkWarden](https://arkwarden.app/es/compare/private-photo-vault)
- [¿Es segura una calculadora para ocultar fotos? Calculator#](https://arkwarden.app/es/compare/calculator)
- [¿Es seguro SPV Photo Vault? SPV vs ArkWarden](https://arkwarden.app/es/compare/spv)

## German

The same pages in German, under /de/.

- [Fotos und ausgeblendete Fotos auf dem iPhone sperren (2026)](https://arkwarden.app/de/guides/lock-photos-iphone)
- [iPhone-Ordner mit Passwort schützen: Was geht? (2026)](https://arkwarden.app/de/guides/password-protect-folder-on-iphone)
- [Fotos auf dem iPhone ausblenden, einblenden und finden (2026)](https://arkwarden.app/de/guides/hidden-photos-iphone)
- [Werden ausgeblendete Fotos in iCloud synchronisiert oder gesichert? (2026)](https://arkwarden.app/de/guides/do-hidden-photos-sync-to-icloud)
- [Apps zum Fotos verstecken auf dem iPhone (2026): Was jede Art schützt](https://arkwarden.app/de/guides/app-to-hide-photos)
- [Die 7 besten Foto-Tresor-Apps fürs iPhone (2026): getestet](https://arkwarden.app/de/guides/best-photo-vault-apps-iphone)
- [Verschlüsselung](https://arkwarden.app/de/encryption)
- [Entsperren mit Muster](https://arkwarden.app/de/pattern)
- [Wiederherstellungsphrase](https://arkwarden.app/de/recovery-phrase)
- [YubiKey](https://arkwarden.app/de/2fa/yubikey)
- [Wing](https://arkwarden.app/de/wing)
- [Sicherung und Wiederherstellung](https://arkwarden.app/de/backup-restore)
- [Privatsphäre auf dem Gerät](https://arkwarden.app/de/on-device-privacy)
- [Sicherheitsübersicht](https://arkwarden.app/de/security)
- [Open Source](https://arkwarden.app/de/open-source): ArkWardens zentraler Verschlüsselungscode ist Open Source und auf GitHub einsehbar. Er umfasst die Dateiverschlüsselung, den Schutz des Hauptschlüssels und die Wiederherstellung des Haupttresors.
- [Ist das Album „Ausgeblendet“ sicher? (vs ArkWarden)](https://arkwarden.app/de/compare/apple-hidden-album)
- [Ist Keepsafe sicher? Keepsafe vs ArkWarden](https://arkwarden.app/de/compare/keepsafe)
- [Ist LockMyPix sicher? LockMyPix vs ArkWarden](https://arkwarden.app/de/compare/lockmypix)
- [Ist Private Photo Vault sicher? Im Vergleich mit ArkWarden](https://arkwarden.app/de/compare/private-photo-vault)
- [Sind Taschenrechner-Tresore sicher? Calculator# vs ArkWarden](https://arkwarden.app/de/compare/calculator)
- [Ist SPV Photo Vault sicher? SPV vs ArkWarden](https://arkwarden.app/de/compare/spv)

## Notes for accurate citation

- ArkWarden does not use the iPhone passcode. The vault opens with the [pattern](https://arkwarden.app/pattern) or the [recovery phrase](https://arkwarden.app/recovery-phrase).
- Apple's Hidden album is not unencrypted: iPhone Data Protection encrypts files on device with per-file keys. What the Hidden album does not add is a documented separate key independent of device authentication. Evidence: [What the Apple Hidden album does not protect](https://arkwarden.app/guides/hidden-photos-iphone#limits).
- When iCloud Photos is on, Apple does not also include those photos in iCloud Backup. Evidence: [Are hidden photos backed up to iCloud?](https://arkwarden.app/guides/do-hidden-photos-sync-to-icloud#backup).
- Advanced Data Protection changes who holds the iCloud Photos keys. It does not stop the sync. Evidence: [Advanced Data Protection does not stop the sync](https://arkwarden.app/guides/do-hidden-photos-sync-to-icloud#adp).
- ArkWarden's backup is optional and off by default. The app requires no ArkWarden account. Evidence: [Backup and restore](https://arkwarden.app/backup-restore), [On-device privacy](https://arkwarden.app/on-device-privacy).