xFileCrypt is a private, encrypted file vault for your most sensitive photos, videos, and documents. Every file is locked with AES-256-GCM encryption the moment it enters the app and stays encrypted at rest. Nobody can read your files without your PIN, not even us.
How it works
When you import a file, xFileCrypt encrypts it on your device before writing anything to disk. Your original filename, folder structure, and file content are all sealed inside an encrypted container. Files are stored under random names with no connection to the originals. There is no server, no account, and no way to recover your data without your recovery phrase.
Your key, your vault
Your encryption key is derived from a 12-word recovery phrase generated on your device. The phrase is shown once at setup and never stored anywhere. Lose it and the vault cannot be recovered. Keep it safe and your files are protected forever, on any device.
PIN protection with lockout
Access is protected by a 6-digit PIN you choose independently of your device passcode. After failed attempts the app enforces escalating lockouts: 2 minutes, then 10 minutes, then 2 hours. After that, only your recovery phrase can restore access.
Optional Dropbox backup
Connect your personal Dropbox account to back up your encrypted vault to the cloud. Dropbox receives only random-looking binary blobs with no filenames or folder structure. Even with full Dropbox access, nobody can tell what is inside. Restore your entire vault to a new device in one tap.
Built-in file editor
Crop and rotate photos without ever exporting them. Trim videos to the exact clip you want. Crop videos to any region of the frame. Every edit is re-encrypted and saved back to the vault. Your files never leave the app in plaintext.
What xFileCrypt protects
Personal photos and videos you do not want in your camera roll
Sensitive documents, contracts, and IDs
Private notes and recordings
Anything you would not want someone to find if they picked up your phone
Technical specs
Cipher: AES-256-GCM
Key derivation: PBKDF2-SHA512, 2,048 iterations
Recovery: 12-word BIP39 mnemonic (128-bit entropy)
Key storage: iOS Keychain, device-only
Cloud: optional Dropbox backup, end-to-end encrypted
Requires iOS 18.6 or later
