Stash - Encrypted Vault

Stash is an iOS application that allows users to securely store and manage private media files (photos, videos, and documents) on their device. 

The app encrypts all stored files using AES-256-GCM, with encryption keys derived from a user-provided password via PBKDF2-HMAC-SHA256 (600,000 iterations). 

Files are encrypted locally on the device and optionally synced to the user's personal iCloud storage. 

The app does not transmit user data to any external servers. Encryption is used solely to protect personal user data from unauthorized access.

US authorities are permitted to demand data  (even if stored abroad)  from US-companies via warrants according to the CLOUD Act. Everything you store on iCloud that is not encrypted might be transmitted to and can be read by US authorities and is therefore not securely stored.
Any sensitive media should be stored encrypted, which Apple does not allow. 

With Stash you can not only  hide sensitive data from others by encrypting it locally, you can also synchronize it securely to your other devices without anyone except yourself being able to read or see it.

No! I hate all apps that are cluttered with advertisements and will not do that to my own apps.
Stash will stay ad-free forever. 

I might need to ask for a small fee to make up for the costs I have by publishing this app to the appstore in the future though.

Use the trap vault to gain another level of security by using a second password in case someone forces you to unlock the app in their presence. Your main files will still be encrypted - only what you imported to the trap vault will show.

All files will be encrypted locally on import. 

When you enable iCloud synchronization, the encrypted files will be moved to the apps iCloud container and ios will take care of uploading them. 

Install the app on another device and it will automatically detect that there is a synchronized Stash Vault active and ask for your password. 

Every change to your files (moving between folders, deleting, adding) will be synchronized to all your other connected devices.

You will be asked if all media should be downloaded first to make sure there is no data loss.

If you continue, there is a 7-day window in which all your devices can download all Stash-data from iCloud. To do that, you need to unlock the vault on every device you want to download your files to. Once all files are safely stored locally, Stash will tell you so after unlocking.

In case you enable iCloud sync, you can choose between two options: Either optimise storage or request to keep all files downloaded.

Either way, iOS will make its own decision on what to keep local and what to keep only in iCloud. If you frequently use the app and select that files are requested to be downloaded, chances are high that they stay available, but Stash does not control that behavior.

An idea would be to use both the local storage and the iCloud container. That would allow users to select files that should never be evicted by iOS, but I have no need for this feature. If you need it, let me know!

I just created this app for fun and do not make any profit out of it. Therefore I can only spend limited time on support or adding features, but I will try to incorporate every feedback I get. Please send it to jorisk.apps@icloud.com