Files and media
Photos, videos, and documents are stored as encrypted items. Capture directly into the vault with the built-in camera or scan documents with OCR — files never touch the Photos app.
SkimZero Vault
Your digital life,under your control.
Local encryption · Real privacy
Created by Damaso SanchezBrief / Private vault for iOS 17+
Your digital life,under your control.
SkimZero Vault combines a locally encrypted vault, a browser/viewer with local content blocking, and an optional recovery feature. It protects photos, videos, documents, notes, and passwords without advertising, usage profiles, or remote access to your vault content.
01Privacy by architecture02Local per-file encryption03Exclusive user control
Informational website. Final availability depends on release configuration and App Store review.
9:41● ● ▰
PRIVACYSkimZero Vault
•••ENCRYPTED VAULTEverything stays with you.Face ID + PIN
AVAILABLE TOOLS
Protected browserEphemeral session›
Media viewerIsolated data›
Open vaultMulti-factor protection›
✓
Local processingYour content never leaves the device
256
AES-GCMAuthenticated per-file encryption
LOCALContent processed on the device
PRIVATENo advertising or behavioral analytics
HONESTFeatures and limits explained clearly
01 / PRODUCT
A vault for what deserves greater care.
A native SwiftUI experience that combines encrypted storage, a private browser, a TOTP authenticator, and multi-layer security — with no advertising, analytics, or remote access to your content.
Notes, passwords & TOTP
A private space for secure notes, credentials with a built-in strong-password generator, and TOTP authenticator codes — all within the same vault session.
Private browser & viewer
Secure browser with local content blocking, incognito-by-default sessions, and native Picture-in-Picture when the site supports it. No browsing history leaves the app.
Multi-layer security
Decoy vault with a separate PIN for plausible deniability, duress PIN for silent emergency wipe, encrypted local security log, and configurable auto-lock.
Order without exposure
Favorites, tags, local search, custom names, and a trash folder with configurable retention, without indexing content outside the app.
Protected backup & recovery
Export an encrypted password-protected container. Optional email-verified recovery restores on any device without the server ever accessing the key or content.
02 / SECURITY
Layered security, not slogans.
The vault combines authenticated cryptography, system protections, and distinct factors to reduce the impact of a compromised credential.
01Per-file encryptionAES-256-GCM
Each item uses an independent key.
02Vault protectionKey wrapping
The Vault Key is not stored as readable content.
03PIN derivationArgon2id
PBKDF2-SHA256 with 600,000 iterations as a compatibility option.
04Device bindingSecure Enclave + HKDF
The opening key is combined with a device secret.
05System protectionKeychain + Data Protection
Device-bound secrets and files under complete iOS protection.
Layered access
Biometrics and a PIN support regular access. After three failed attempts, a TOTP or recovery key is required. The decoy vault provides plausible deniability; the duress PIN silently wipes everything if entered under coercion.
03 / PRIVACY
Privacy also means explaining the exceptions.
Vault content is encrypted locally. Some peripheral capabilities require permissions or limited communication, and they are identified here explicitly.
What stays local
- Vault files, notes, passwords, and keys.
- Encryption, decryption, tags, search, and the security log.
- Visual detection with Vision when the feature is available.
- Media-viewer cookies in an isolated WebKit store.
Only what is necessary
- Email and one-time codes for enrollment, backup, or restoration.
- User-requested navigation when opening external websites.
- HTTPS-encrypted communication when the recovery service is involved.
- No advertising profiles or cross-site tracking.
Only you can open it
- Your PIN and backup password are never transmitted.
- Your files, notes, passwords, and keys remain encrypted.
- E2E encryption protects content through the authorized device.
- No first-party cookies, analytics, advertising, or trackers.
E2E, in simple terms: information is encrypted before it can be exposed and is only decrypted where you authorize it. We do not have a master key.
04 / TRUST
Designed to work within platform rules.
SkimZero Vault is not affiliated with or endorsed by Apple. The final presentation must match the submitted binary and the privacy answers in App Store Connect.
Accurate representation
The website describes only present capabilities and verifiable limits.
Permissions with context
Camera and biometric access should be requested near the feature with a complete explanation.
Third-party rights
The viewer is limited to content you own or are authorized to use and respects each service's restrictions.
Declared cryptography
Encryption use must be reviewed and declared correctly before each distribution.
Website privacy notice
This website is informational only. It does not create accounts, receive files, execute app features, add first-party cookies, or collect personal data. Hosting may use strictly necessary technical cookies for security and access. External websites apply their own practices.
Technical information describes the observed state of the project and is not an absolute security guarantee. Users are responsible for preserving their recovery factors and using the app only with content they own or are authorized to use.
05 / FREQUENTLY ASKED QUESTIONS
Clear answers.
What does end-to-end encryption mean in SkimZero Vault?
Content is encrypted within its protected context and can only be decrypted on an authorized device with the correct factors. Neither this informational website nor the recovery service receives the keys required to read the vault.
Can SkimZero Vault see my files?
No. The design encrypts and processes vault content on the device. Files, notes, and passwords are not part of the email-recovery flow.
What is the decoy vault?
The decoy vault is a second independent vault with its own PIN and isolated content. If someone pressures you to open the app, you enter that PIN and it opens a vault that looks normal but contains none of your real information — plausible deniability built in.
What is the duress PIN?
The duress PIN is a dedicated emergency PIN. When entered, the app immediately and silently wipes all vault content, presenting an empty app. This action cannot be undone.
Why might it request camera access?
For direct photo and video capture into the vault and for OCR document scanning. iOS controls the permission and it can be revoked from Settings at any time.
What happens if I forget my PIN?
The app cannot recover a PIN or decrypt the vault without the expected factors. Keep your recovery key, TOTP, and any protected backup outside the device.
What languages is the app available in?
SkimZero Vault is available in Spanish, English, Portuguese, French, and Chinese, with automatic switching based on your device's system language.
Does this website use cookies or trackers?
SkimZero Vault does not add first-party cookies, analytics, or trackers. Hosting infrastructure may use strictly necessary technical cookies for security and access control; they are never used for advertising or behavioral profiles.
06 / ABOUT THE CREATOR
DAMASO SANCHEZ · CREATOR OF SKIMZERO VAULT
Useful technology,understandable privacy.
An independent developer focused on building digital experiences where privacy is an architectural decision, not a feature added at the end. SkimZero Vault began with a simple idea: the most personal information should remain under the control of the person who created it.
FOCUSPrivacy · Security · iOS experience
PRINCIPLELess exposure, more control for the user