77%
smaller
iPhone · iOS 17+
Shrink
512 → 118 MB
77% smaller · 37 dB
Hide photos.Shrink videos.You hold the key.
The photos you’d rather not explain when someone borrows your phone, behind a key only you hold. Videos shrink on the way in — 512 MB becomes 118 MB with the quality checked, not promised. No account. No server. Nothing collected.
Free for your first 150 photos and 15 videos · No account · Apple privacy label: Data Not Collected
- AES-256-GCM
- PBKDF2-SHA256
- 600,000 rounds
- Apple CryptoKit
- CloudKit · end-to-end
- Data Not Collected
- No server
- No analytics SDK
- Secure Enclave
- 12-word Recovery Kit
01What you get
Your photos, locked.
Your videos, lighter.
You know the moment: someone asks to see one photo and keeps swiping. And the other one: “iPhone Storage Almost Full”, again. Hushfold fixes both in one app — and never asks who you are.
Shrink videos,
No account.
Your Apple ID and your password are enough.
No email · no sign-up · no server
A7 4E D1 08 B3 6A F5 9F 2C 1D 7E C0 58 E2 3B 91 0C 77 4B DE A0 19 F3 62 8D B4 2E 5F
4E D1 08 B3 6A F5 9F 2C 1D 7E C0 58 E2 3B 91 0C 77 4B DE A0 19 F3 62 8D B4 2E 5F
D1 08 B3 6A F5 9F 2C 1D 7E C0 58 E2 3B 91 0C 77 4B DE A0 19 F3 62 8D B4 2E 5F
08 B3 6A F5 9F 2C 1D 7E C0 58 E2 3B 91 0C 77 4B DE A0 19 F3 62 8D B4 2E 5F
B3 6A F5 9F 2C 1D 7E C0 58 E2 3B 91 0C 77 4B DE A0 19 F3 62 8D B4 2E 5F
6A F5 9F 2C 1D 7E C0 58 E2 3B 91 0C 77 4B DE A0 19 F3 62 8D B4 2E 5F
F5 9F 2C 1D 7E C0 58 E2 3B 91 0C 77 4B DE A0 19 F3 62 8D B4 2E 5F
AES-256-GCM · PBKDF2
600,000
rounds between a guess and your key
Encrypted on your iPhone
Two PINs.
Two real vaults.
Decoy vaultDisguise screensFace-down lock
02Shrink
Can you tell which is which?
Neither could we.
Hardware HEVC · on-device · no upload
Our bar: 34 dB. Below it, Hushfold refuses to keep the result.
Only kept if it earns it
The result must be at least 15% smaller and pass a strict quality check (PSNR ≥ 34 dB). Otherwise the app says no and tells you why.
Compare before you decide
Original and shrunk side by side, same moment, same scrub. Keep the smaller one, or keep the original.
Undo for 30 days
The original waits in Trash. A wrong call is never final.
03Never lose it
The one-star review
we built against.
“Switched phones and half my library was gone.”
It is the most common complaint in this category, and none of the four things below is a promise. Each is a mechanism you can open in Settings and check.
5versions
Your vault index keeps its history
Every backup keeps the last five versions of the index. A bad sync can be rolled back from inside the app, and rolling back keeps the current state as a version too.
0112words
A second way in that is only yours
The Recovery Kit is a 12-word phrase shown once. Lose the password and it still opens the vault. Nobody else holds a copy, including us.
02.hushfoldone file
Export everything, free, forever
The whole vault becomes one encrypted file you can AirDrop or put in Files. It opens on any iPhone with your password, whether or not you ever pay.
0330days
Nothing is deleted immediately
Deleted items and replaced originals wait in Trash for 30 days. A wrong tap is never final.
0404 · Protected by design
Protected by design
1234
No account
No sign-up, no email, no profile. The vault is found by your Apple ID and opened by your password.
No analytics of any kind
Not “off by default” — not in the code at all. A build-time check fails the build if an analytics SDK is ever imported.
No back door
Your key is derived from your password on the phone. Forget it and even whoever wrote this app cannot open your vault.
No notifications
Nothing ever appears on your lock screen to announce this app. Backup status is shown inside the app only.
05How it works
From install to your first hidden photo in under a minute.
Measured on a clean install: 14.4 s from first launch to first encrypted photo.
- 01
Set a master password
Twelve characters or more. Add a 6-digit PIN and Face ID for everyday unlocking. Your key is derived on the phone and never leaves it.
- 02
Add your first photo
From Photos, the camera, or Files. Hushfold encrypts it as it arrives — the file on disk is ciphertext from the first byte.
- 03
It is gone from Photos
Turn on “Remove originals” and iOS moves them to Recently Deleted. The only copy that matters now lives behind your lock.
06One place
Photos, videos, files, notes,
links and voice memos.
Photos · Videos · Files · Notes · Links · Voice
Search the text inside photos
On-device OCR. Nothing is sent anywhere to read it.
A viewer that feels like Photos
Swipe, pinch to zoom, pull down to close, smooth video scrub.
An icon that says nothing
Neutral by default, four alternate icons to choose from. No lock, no shield on your home screen.
07Compared
What the other vaults
ask you to accept.
Full side-by-side tables →
Checked on the App Store and the apps’ own sites, September 2026. If something here is out of date, email us and we will fix it.
08Under the hood
How your key is made.
No adjectives, just the pipeline.
Every number here is in the shipped code. Apple CryptoKit only — no third-party crypto.
1 · Master password
••••••••••••
12+ chars · never stored, never sent
2 · PBKDF2-SHA256
600,000
rounds · per-vault salt · ~1 s on your phone
3 · Vault key
256-bit
random · wrapped by password key + Recovery Kit
4ED108B36AF59F2C
4 · AES-256-GCM
sealed
4 MiB chunks · authenticated · every item
A7 4E D1 08 B3 6A F5 9F 2C 1D 7E C0 58 E2 3B 91 0C 77 4B DE A0 19 F3 62 8D B4 2E 5F A7 4E D1 08 B3 6A F5 9F 2C 1D 7E C0 58 E2 3B 91 0C 77 4B DE A0 19 F3 62 8D B4 2E 5F A7 4E D1 08 B3 6A F5 9F 2C 1D 7E C0 58 E2 3B 91 0C 77 4B DE A0 19 F3 62 8D B4 2E 5F
- 600,000
- PBKDF2 rounds
- 256-bit
- AES-GCM key
- 0 B
- sent to us, ever
- 30 days
- to undo anything
No server of oursKey never leaves the phoneData Not Collected
09Pricing
Free to start.
Pay only if you outgrow it.
Try everything free. If you outgrow 150 photos or 15 videos, Unlimited lifts the cap — yearly with 7 days free and two taps to cancel, or once, for good. Whatever you decide, your photos stay yours: viewing, exporting and deleting never need a purchase.
7 days free on yearly
Unlimited
The same vault, no ceiling. Three ways to pay, one thing unlocked.
- Yearly7 days free
Auto-renews until you cancel
$24.99 / year
- Lifetime
One payment, never renews
$34.99 once
- Weekly
Auto-renews until you cancel
$2.99 / week
Lifetime is 599.000₫ on the Vietnam storefront
Get early accessYearly starts with a 7-day free trial, then $24.99 a year; yearly and weekly renew automatically until you cancel in Settings → Apple ID → Subscriptions. Lifetime is a single payment that never renews. All three unlock exactly the same thing and are tied to your Apple ID, so a new phone keeps them.
- Photos∞
- Videos∞
Both include: notes, links and files without limit · single or batch video shrink · decoy vault and disguise screens · encrypted iCloud backup · viewing, exporting and deleting, always.
10FAQ
Questions people ask before they trust a vault.
I forgot my master password. Can you reset it?
No — and that is the design. Use the 12-word recovery phrase you saved when you set up the vault: on the lock screen, tap “Forgot password? Use the recovery code”. Without the password or the phrase, nobody can decrypt your data, including us.
I have a new iPhone. How do I get my vault back?
Install Hushfold, tap “I already have a backup” on the first screen, choose “In my iCloud”, then enter your master password. You need the same Apple ID and to have had iCloud backup switched on. Photos and videos arrive afterwards in the normal sync.
Where did my photos go after importing?
If you turned on “Remove originals from Photos”, iOS moved them to Recently Deleted, where they stay for 30 days. The encrypted copies are in your vault. The switch is off by default and asks once after your first import.
Does compression hurt quality?
The app refuses to keep a compressed copy unless it is at least 15% smaller and passes a quality check (PSNR ≥ 34 dB). You always compare both versions before deciding, and the original stays in Trash for 30 days.
Can Hushfold block screenshots?
No app on iOS can block a still screenshot, and Hushfold does not claim to. It detects one and warns you immediately. Screen recording and mirroring are blocked: while either is active the whole app is covered by a shield.
Can Apple read my iCloud backup?
Apple stores ciphertext. Your vault key stays on your device, wrapped by your master password, and the backup lives in your own private CloudKit database inside your Apple account. We have no access to it and no way to request it.
I bought Unlimited but the limit is back.
Open the purchase screen (gear → Hushfold Unlimited) and tap “Restore purchases”. The purchase is tied to your Apple ID, so make sure you are signed in with the one you bought it on.
Is Unlimited a subscription?
Your choice. Yearly ($24.99, with a 7-day free trial) and weekly ($2.99) renew until you cancel them in your Apple ID settings. Lifetime ($34.99) is one payment that never renews. All three unlock exactly the same thing, and viewing, exporting and deleting never depend on any of them.
What happens if I stop paying?
Nothing is taken away. Everything you saved stays viewable, exportable and deletable. The only thing that comes back is the free cap on adding new photos and videos.
Does deleting the app delete my photos?
Yes — the vault lives inside the app, and iOS removes it with the app. That is exactly why there are two free ways out: turn on encrypted iCloud backup, or export the whole vault to one .hushfold file first. Do one of them before you delete.
I reset my phone. Can I get my photos back?
If iCloud backup was on: reinstall, tap “I already have a backup”, enter your master password. If you exported a .hushfold file: import it. If you did neither, no — and nobody can, including us. There is no server holding a copy.
Does it work on iPad?
Hushfold is built for iPhone. It runs on iPad in an iPhone-size window, but there is no iPad layout yet.
Why are there no notifications?
A notification on your lock screen would announce what this app is to anyone holding your phone. Hushfold has none — not push, not local. Backup status is shown inside the app only.
11Launching November 2026
Be first when it lands
on the App Store.
One email on launch day with the App Store link, nothing else. No newsletter, no tracking pixel, and the list is deleted after launch.
Your address is used once, for the launch email, then deleted.