Feature comparison
21 features compared. Every row is shown below. On a small screen, scroll the table sideways to compare both apps.
| Feature | NullVault | Vaultaire |
|---|---|---|
| On-device file encryption | AES-256-GCM authenticated encryption for managed vault data. N1 | AES-256-GCM for files and metadata. 1 |
| Secure Enclave key protection | Platform-specific protection is documented; no claim that file encryption runs inside Secure Enclave. N1 | Keychain and iOS Data Protection; explicitly not Secure Enclave AES file encryption. 1 |
| Provider access to vault keys | No provider-held recovery master key; optional cloud features carry encrypted application data. N1 | No provider-held vault decryption key; optional ciphertext backup in the user’s iCloud. 1 |
| Offline by default | Core local vault use works offline. Purchases and optional cloud features need a connection. N2 | Local-first storage; analytics and crash diagnostics are on by default with a Settings off switch. 2 |
| Account required | No NullVault account for local use; Apple account for optional iCloud features. N2 | No identity account; Apple account for iCloud services. 2 |
| Key derivation | Memory-hard Argon2id pattern processing on iOS and Android. N1 | PBKDF2-HMAC-SHA512; 600,000 pattern iterations. 1 |
| Pattern lock | Yes. A 5×5 pattern unlocks the matching vault’s random master key. N1 | Yes. 5×5 pattern access wraps a random master key. 1 |
| Calculator-style disguise | No working calculator launcher advertised; iOS Pro offers alternate icons. N3 | Not advertised in the cited feature catalog. 2 |
| Decoy / second vault | Yes. A separate pattern opens an independent vault with benign content. N4 | Yes. Separate configured patterns address separate vaults. 2 |
| Duress / panic mode | Duress on iOS and Android; separate panic wipe on Android. Destructive actions are device-local. N4 | Duress removes other local indexes and recovery mappings; cloud backups remain. 2 |
| Intruder log | Not listed among the released NullVault features. N4 | Intruder selfie not advertised in the cited feature catalog. 2 |
| Recovery phrase | iOS: per-vault 24-word phrase. Android: separate same-device and portable-backup phrases. N4 | Custom nine-word recovery phrase; surviving encrypted data is still required. 2 |
| Encrypted vault sharing | iOS Pro: encrypted, read-only replica with a separate sharing phrase. Not supported on Android. N4 | Yes. Separate sharing phrase with access and export controls. 2 |
| Encrypted iCloud backup | Yes on iOS; encrypted before upload. Android uses a portable encrypted backup file. N4 | Optional encrypted iCloud backup; advertised for Free and Pro. 2 |
| File shredder | No multi-pass flash-erasure guarantee. Android panic wipe removes a required key; iOS duress removes local vault references. N4 | Session cleanup is documented; no provable multi-pass memory or physical flash wipe. 1 |
| Documents as well as media | Yes. Photos, videos, documents, arbitrary files and private notes. N4 | Yes. Photos, videos and arbitrary files. 2 |
| Face ID quick re-unlock | Not advertised as a released quick re-unlock feature; the documented access flow uses patterns. N4 | Not advertised in the cited feature catalog; documented unlock uses a pattern. 12 |
| Ads inside the app | No ad-supported tier advertised; personal data is not used for advertising. N2 | No ad-supported tier advertised in the cited product catalog; diagnostics are a separate question. 2 |
| Free tier | iOS: 5 vaults, 20 total items, one collection per vault; encrypted backup included. Android terms are separate. N3 | Published FAQ: up to 3 vaults, 100 photos and 10 videos in total. 2 |
| Cheapest paid entry | Monthly Pro is the shortest advertised iOS subscription; check the current regional price. N3 | Check current App Store offers; Pro device sync is advertised. 2 |
| Lifetime option | Yes, a one-time iOS Pro purchase; Android entitlement is separate. N3 | Not specified on the cited current homepage; verify the purchase screen. 2 |
Sources are linked below. “Not documented” means the cited material does not establish that detail; it is not proof that a feature is absent. Platform and plan differences are stated in the cells.
The shared foundation
Both products describe separately addressed encrypted vaults without a visible master picker. Neither should be presented as the only app with this idea. NullVault’s practical distinction includes Android support and explicit platform-specific backup and recovery behavior.
Platform coverage is different from synchronization
NullVault is available on iPhone and Android. Its iOS encrypted iCloud backup and Android portable backup are distinct flows. Vaultaire advertises Pro synchronization between iPhone and iPad, which can be a better fit if keeping the same archive current on those devices is your main requirement.
Recovery phrases are not interchangeable
Vaultaire describes a custom nine-word recovery phrase and a separate encrypted access envelope. NullVault uses a per-vault 24-word recovery phrase on iOS; Android separates same-device pattern recovery from a portable backup phrase. Matching concepts do not mean compatible backup formats.
What hidden vaults actually hide
Vaultaire explicitly distinguishes a hidden interface from enumerable encrypted index files. NullVault also limits its claims about what separate patterns conceal. An app can avoid displaying a list while leaving evidence of encrypted storage on the device. Read the limitations before relying on either under forced access.
Encryption is more than a function name
Vaultaire publishes PBKDF2-based access details; NullVault documents its own access architecture, including Argon2id on iOS and Android. A key-derivation function is one part of the system. Pattern strength, key handling, metadata protection and recovery design also matter; the names alone do not establish a security ranking.
Hardware protection is not the same as Secure Enclave encryption
Vaultaire’s current security documentation explicitly places symmetric encryption in the app process, with Keychain and iOS Data Protection protecting device records. It does not describe its AES operations as running inside Secure Enclave. NullVault also publishes platform-specific trust boundaries. A hardware checkbox would hide this distinction, so the table states what each product actually documents.
Read the current free allowance
Vaultaire’s current homepage FAQ lists three vaults with 100 photos and 10 videos in total. NullVault’s iOS Free tier lists five vaults and 20 total items. Those limits favor different collections: a higher vault count does not mean more media capacity. Confirm the installed offer before choosing a plan or migrating a large library.
Price and what you get
Compare the offer on your own device, including renewal period, storage limits and backup features. NullVault’s pricing page separates iOS and Android tiers. Vaultaire has its own store offer; we do not turn region-dependent prices into a universal savings claim.
When Vaultaire is the better fit
Vaultaire deserves consideration if its documented iPhone-and-iPad Pro sync is essential. The apps share several privacy concepts, so test the recovery and device workflow that matters to you.
Our verdict
Both apps offer local-first encrypted spaces addressed by patterns. Choose NullVault when you need its Android support or recovery workflow; consider Vaultaire when its iPhone-and-iPad synchronization is the deciding feature. Start with a small, harmless collection and test the complete backup-and-restore path before moving important originals.
Switching to NullVault
- Export a small sample from Vaultaire and check that the original quality and file types are preserved.
- Import into a NullVault vault, lock it, and verify that the intended pattern opens the correct collection.
- Follow the backup instructions for your platform and test recovery using non-sensitive data.
- Keep the source archive until the new copy and recovery path are verified. Review gallery originals, Recently Deleted, shared albums and cloud copies separately.
Frequently asked questions
Is NullVault the only app with separate patterns?
No. Vaultaire also documents separate configured patterns opening separate encrypted vaults. Compare platform coverage, backup behavior and recovery rather than treating the gesture as unique.
Does NullVault require an account?
No NullVault account is required for local use. Optional iCloud features use Apple’s services; account-free local storage does not mean every backup destination is account-free.
Can a recovery phrase restore files after I lose my phone?
Only when the matching encrypted backup data survives. On Android, the same-device recovery phrase cannot restore a portable backup; that backup has its own phrase. See recovery scope.
Can I move my existing backup directly into NullVault?
Do not assume backup formats are compatible. Export supported original files from the source app, import them into NullVault, then create and verify a NullVault backup.
Does Vaultaire encrypt files inside Secure Enclave?
Its current architecture says AES operations run in the app process. Keychain and iOS Data Protection protect device records; that is a different claim from Secure Enclave file encryption.
Which app has the larger free media allowance?
Vaultaire’s published FAQ lists 100 photos and 10 videos across up to three vaults. NullVault’s iOS Free tier allows 20 total items across up to five vaults. Check current store terms before deciding.
Does a paid plan remove the security limitations?
No. Paying may change feature access or capacity, but it does not protect an observed unlock, a compromised operating system, or a copy already exported outside the vault.
Sources and review
-
N1. NullVault security architecture and security references.
-
Vaultaire: official product documentation — reviewed 13 September 2026.
-
NullVault backup, recovery and pricing.
Published by the TAD team at Think Aloud Design. This compares documented behavior, not a hands-on security test or independent audit. There are no affiliate rankings or paid placements. Send a correction if a product has changed.