Hidy VaultPattern encryption: your pattern is the key, not a password screen
In Hidy Vault, the pattern you draw is part of the key that decrypts your vault. It isn't a lock screen in front of readable files. Without the pattern (or the vault's recovery phrase), the files stay encrypted.
- Draw at least 6 dots on a 5×5 grid. That pattern opens one vault.
- Your pattern plus a secret in the iPhone Keychain derive the key. Files, names, thumbnails, folders and notes are encrypted with AES-256-GCM.
- Hidy can't reset a pattern. Your way back in is the vault's 12-word recovery phrase.
What pattern encryption means
Most "locked" apps work like a door in front of an open room. The files sit on the phone in a readable form, and the app shows a PIN screen before it lets you look. Anyone who gets past the screen, or reads the app's storage directly, sees the files.
Hidy works the other way. Every file you import is encrypted on your iPhone before it is stored. The key that decrypts it is derived from the pattern you draw. Drawing the pattern doesn't open a door. It recreates the key.
How it works in Hidy Vault
- You draw a pattern on a 5×5 grid, connecting at least six different dots. Tap controls are there if drawing is hard.
- Hidy combines it with a device secret. A random secret stored in the iPhone Keychain is mixed with your pattern through PBKDF2 and HKDF key derivation.
- That unlocks the vault key. A random vault key protects the stored data. File contents, file names, thumbnails, folders and notes are encrypted with AES-256-GCM. Large videos are encrypted in authenticated chunks, so a damaged or swapped chunk is detected.
- Locking drops the key. Tap Lock or leave the app, and the active vault session ends. Hidy also covers its screen in the app switcher.
Hidy Vault keeps photos, videos and documents in encrypted vaults that open only with a pattern you draw. No account, no Hidy server. Free for 3 vaults.
One pattern, one vault
Each valid pattern opens its own space. A pattern you have never used opens a new, empty vault. That means you can keep separate vaults for separate things, and the lock screen never lists which ones exist. See separate hidden vaults for how that works and where its limits are.
What it does not protect
- An open vault is readable. While a vault is unlocked, its files are decrypted on screen, including for tools that someone has authorized to inspect the device.
- Someone who watches you draw. Draw out of sight. A longer pattern with several direction changes is harder to remember from a glance.
- Metadata on disk. Someone who can examine the app's storage can see approximate file sizes and how many vault folders exist. The contents and names stay encrypted.
- No independent audit yet. Hidy has functional regression tests, but it has not had an independent cryptographic audit. The security page lists every boundary.
Why there is no "forgot pattern" button
Because the pattern is part of the key, nobody else holds a copy. There's no account and no Hidy server, so there's nothing to reset. That's the point, and also the risk. Create the vault's recovery phrase on day one and keep it on paper, outside the phone.
For how this compares with the iPhone passcode and Face ID, read pattern lock vs PIN vs Face ID.
Set it up
- Install Hidy Vault and confirm that you understand Hidy can't reset your pattern.
- Draw a pattern of at least six dots. Make it one you can repeat without looking at notes.
- Import a few photos, then lock and reopen once to be sure you remember it.
- In Settings, create the recovery phrase and write the 12 words down.
Frequently asked questions
Is a pattern less secure than a PIN?
It depends on length. A 4-digit PIN has 10,000 combinations. Hidy requires at least 6 different dots on a 25-dot grid, which allows far more paths. Longer patterns that change direction are harder to guess or watch over your shoulder.
Does Hidy store my pattern?
Hidy does not keep a readable copy of your pattern. The pattern is combined with a device secret from the Keychain to derive the key that unlocks the vault.
What if I draw the wrong pattern?
A different valid pattern opens a different, empty space. Hidy doesn't show a wrong-pattern error, so nobody watching can tell whether a vault exists for that pattern.
Can I change my pattern?
Yes. Open the vault, then change its pattern in Settings. If you forgot it, use the vault's recovery phrase, which lets you choose a new pattern.
