Stashlet
Photos, videos and documents, encrypted on your iPhone and opened only by your face and your PIN.
Passports, bank statements, screenshots of passwords. One unlocked phone away from anyone who picks it up.
Everything is encrypted right on the phone. No servers, no uploads, no account. Not even we can look.
Face ID proves it's you. Your six-digit vault PIN opens the door. Bank-grade encryption keeps it shut.
On first launch, Stashlet reads your camera roll the way a stranger would, then hands you the list. Text recognition and QR detection run on your iPhone's own chip. No AI service, no upload, no account.
Passports, driving licences, ID cards. Even the machine-readable lines.
Statements, policies, card numbers. IBANs are checked against their checksum, so near misses don't count.
Recovery codes, Wi‑Fi passwords, 2FA QR codes, the login you screenshotted "just for now".
Everything you'd expect from your Photos app, behind two locks.
Face ID confirms it's you, then your six-digit vault PIN opens Stashlet. It's separate from your iPhone passcode, so knowing one doesn't open the other.
A gallery that feels like home. Swipe between photos, pinch to zoom, select a dozen at once to save back to Photos or delete for good.
Pull in photos and videos from your library, files from iCloud Drive or Files, shoot straight into the vault with the camera, or scan paper documents.
Every document and scan is read on your iPhone the moment it arrives. Search "deductible" and the right policy opens with the word highlighted.
Face ID, vault PIN, decoy PIN, panic lock, auto-lock, the screen-recording shield and the unlock log. All in one place, all on by default where it matters.
From the moment you tap "Add to vault" to the moment you look at it again.
Stashlet makes its own copy. Your original stays in Photos until you decide. Delete it there, then empty Recently Deleted, and the only copy left is the locked one.
The copy is encrypted with AES‑256‑GCM, the same standard banks use. Every photo, video, thumbnail and document gets sealed on its own. Without the key, it's static.
A 256-bit key is created on your iPhone and kept in Apple's Keychain, tied to this device and readable only while it's unlocked. Your decoy vault gets a completely separate key.
Photos are decrypted on screen and nowhere else. Videos use a temporary copy that's shredded when you close them. Leave the app and the vault locks.
No account to hack. No server to breach. No copy anywhere else to subpoena.
Face ID plus your vault PIN
No PIN, no entry. And the attempt gets logged.
No servers. Nothing is ever uploaded to us.
The vault is kept out of backups entirely.
Without the key, they're just noise.
The moments when someone's looking over your shoulder, holding out their hand, or recording your screen.
If you're ever pressured to open Stashlet, enter your decoy PIN. A separate, fully encrypted vault opens with everyday photos you choose. It looks identical, and neither vault shows that the other exists.
Turn your iPhone over, or swipe down with three fingers, and Stashlet locks instantly.
Three wrong PINs in a row and the front camera quietly captures who tried, encrypted inside your vault. Opt-in.
Swipe up and Stashlet shows a locked cover, never your photos. Even the keyboard steps aside.
Start a recording or mirror the screen and the vault hides itself until it stops.
Auto-lock is immediate by default. Decrypted images are dropped from memory and temporary files are deleted every time it locks.
There's nothing to sign up for and nothing to breach. Stashlet works fully offline, because it never needed the internet in the first place.
No mock-ups, no renders. This is Stashlet running on iPhone: unlock, browse, add, search and lock.
Because nothing leaves your iPhone, there's no copy for anyone to restore. That's the point, and it's worth knowing.
The vault isn't included in iPhone backups. Delete the app or lose the phone and the vault goes with it.
We never store it, so we can't reset it. Pick one you'll remember and that isn't your iPhone passcode.
Saving or sharing from the vault creates a normal copy outside it. The vault original stays encrypted.
No. Stashlet saves an encrypted copy and leaves your original where it was. If you want the original gone, delete it in Photos and then from Recently Deleted.
No. There are no Stashlet servers and nothing is uploaded. Encryption, the Exposure Scan and document search all run on your iPhone.
Your vault PIN is a separate six-digit code just for Stashlet. Someone who knows your iPhone passcode still can't open the vault.
Exactly like the real one. It's a fully separate encrypted vault with its own key and its own contents. When it's open, the app gives no sign that a second vault exists.
Your PIN is never stored, and the vault isn't in iCloud backups, so there's no way to recover it. That's what keeps it private. Keep a separate backup of anything irreplaceable.
Completely. Stashlet never needs a connection to lock, unlock, scan or search.
Ideas, bugs, questions. Every note is read by the people who build Stashlet.
Private by design. Encrypted on device. Opened by you alone.