Kryptis Private Vault

Scenarios

How journalists can protect source photos and recordings on iPhone

The camera roll is the worst place for a source. It syncs, it backs up, it shows faces in People, and it opens with the phone passcode. A vault with its own passcode, a decoy to open under pressure, a self-destruct code, and a camera that blurs faces at capture is built for this.

Updated September 6, 2026 · 2 min read

The direct answer

Shoot with the Kryptis private camera with face blur on when a face should never exist unblurred. Import documents and recordings into the vault and delete the originals. Keep an encrypted backup with the extra lock somewhere other than the phone. Set up the Decoy Vault and Self-Destruct Mode before you need them, and turn Face ID off for the vault.

This is not legal advice. Source protection law, shield laws and what can be compelled at a border differ by country. Your newsroom's legal team or a press freedom organisation can tell you what applies where you work.

Where source material leaks by default

  • Photos: iCloud Photos, backups, the People album, Memories, widgets, and any device on your Apple Account.
  • Files: iCloud Drive and Spotlight.
  • Voice Memos: iCloud sync.
  • The phone passcode: it opens all of the above, and Face ID can be presented to a face.

What to do now

  1. Turn on face blur in the private camera when photographing a person who must not be identifiable. The blurred frame is the only one that exists.
  2. Import documents, screenshots and recordings into the vault. Kryptis stores files, not only photos.
  3. Delete the originals from Photos, Files and Voice Memos, then Recently Deleted.
  4. Create an encrypted backup with the extra lock and keep it off the phone. Give the recovery words to no one; store them apart from the backup.
  5. Set up the Decoy Vault with plausible working material.
  6. Set up Self-Destruct Mode and know the passcode cold.
  7. Keep Face ID unlock off for Kryptis, and set Auto-Lock short.

Metadata

Photos carry location and device metadata. The vault encrypts the file, metadata included, but a copy you share out carries whatever the original had. Strip location before sending anything on.

What not to rely on

Hidden album, locked notes, a disguised icon, or deleting at the desk. See what a border search exposes.

What Kryptis does not solve

Compelled disclosure, the law where you are, and the security of whoever you send material to. A vault protects the copy on your phone.

Frequently asked questions

Does face blur leave an unblurred original?

No. Blur is applied at capture and the blurred image or frames are what is encrypted into the vault.

Can Kryptis store audio and documents, not just photos?

Yes. Files of other types can be imported and are encrypted the same way.

Kryptis app icon

Kryptis is on its way to the App Store.

Coming soon to theApp Store

Related