Secure Camera: Take the Photo Inside the Vault

Most photo vault apps ask you to shoot in the stock Camera app, import the result, then delete the original. Vaultaire removes the middle two steps. The camera lives inside the vault, and the capture is encrypted where it lands.

Secure Camera is Vaultaire's built-in photo and video capture. It uses the front or rear lens, tap to focus, flash or torch, and optional audio. Every capture goes through a review step, and a kept capture is encrypted into the open vault. Vaultaire never adds it to the iPhone camera roll.

Why Import and Delete Leaves a Trail

The usual workflow for a private photo has four moving parts: the stock camera writes to your library, a vault app imports a copy, you delete the original, and you hope that was the end of it. Each of those steps leaves something behind.

The delete is the weakest link. On iOS, a deleted photo moves to Recently Deleted and stays there for 30 days before the system removes it. Anyone who can open your Photos app can open that album. If iCloud Photos is on, the original was already uploaded and pushed to every device signed in to the account before you deleted anything. Shared albums, Memories, the Photos widget, and a Mac running the same library all read from that same set.

Even a fast user leaves a window. The photo exists in the library from the moment the shutter fires until the moment you finish deleting it, and that window covers the exact time you are most likely to hand someone your phone to look at what you just shot.

Secure Camera closes the window by never opening it. There is no original in Photos, so there is no delete to remember, no Recently Deleted entry to clear, and no upload to race.

How to Take a Private Photo on iPhone

1. Open the camera from inside an unlocked vault

You draw your pattern, the vault opens, and the camera button is in that vault. The camera cannot be reached from the lock screen or from Control Center, because the capture has to have somewhere encrypted to go. On iPad the camera opens as a full-screen view rather than a sheet.

2. Frame the shot with the controls you expect

Switch between the front and rear lens. Tap the preview to set focus and exposure on that point. Cycle flash between auto, on, and off for photos, or turn the torch on for video when the rear camera has one. The preview and the capture both follow device rotation, so a landscape shot is stored the right way up.

3. Review, then keep or retake

After the shutter fires, Vaultaire shows you the frame with two choices. Retake discards it. Save to Vault encrypts it. Nothing is written to the vault until you pick, and nothing is written to Photos either way.

Shutter
JPEG held in memory
Review
Keep or retake
AES-256-GCM
Encrypted with your pattern key
Vault File
Thumbnail built, original stored

What Happens to a Photo

Vaultaire captures JPEG at the largest dimensions the sensor reports, with quality prioritized over speed. Those bytes stay in memory through the review step. If you retake, the buffer is cleared. If you keep, the same bytes go straight into encryption and into the vault, and Vaultaire builds a thumbnail so the file has something to show in the grid.

A photo never touches disk in readable form. There is no scratch file to find, no cache entry to purge, and no Photos library record to delete.

How Video Recording Handles Its Temporary File

Apple's movie recorder writes to a file URL. A video capture cannot stay in memory the way a photo does, and pretending otherwise would be a lie. This is what Vaultaire does instead.

The recording goes to an MP4 with a random UUID name, inside a folder in Vaultaire's own temporary storage that no other app can read. Both the folder and the finished file are set to iOS Data Protection level complete, which keeps them unreadable while the device is locked, and both are excluded from device backups. Before Vaultaire accepts the video, it checks that the file really starts with an MP4 header rather than something else that got moved into place.

Once you keep the video, Vaultaire encrypts it into the vault and then destroys the temporary file: three overwrite passes of zeros, then ones, then random bytes, then deletion. The same cleanup runs when you retake, when you cancel, when a recording fails to start, and when an import is rejected. If the app is ever killed mid-recording, a sweep on the next launch removes anything left in that folder.

What Three Overwrite Passes Can and Cannot Promise

Overwriting a file tells the file system to replace those bytes. On flash storage, wear levelling means the controller may map the new writes to different physical cells and leave the old ones intact until they are reused. Treat the overwrite as a strong cleanup, not as proof that every physical block is gone. The protection you can rely on is the encryption: the video in your vault is unreadable without your pattern, and the temporary file was Data Protection complete for its whole short life.

Camera and Microphone Permissions Are Separate

Camera access is required, and iOS asks for it the first time you open Secure Camera. Microphone access is a second, separate prompt, and it only appears when you record video. Decline it and recording still works: you get silent video and an audio-off badge on screen so you are never surprised by the result later.

In photo mode Vaultaire does not configure the shared audio session at all. Music playing through your headphones keeps playing while you shoot. Vaultaire adds the microphone input only after you grant permission and only for the duration of a video recording, then removes it again.

0
Copies in Photos
3
Overwrite Passes on Temp Video
Optional
Microphone Access

Where the Capture Goes Next

A kept capture is an ordinary file in that vault, and it inherits every setting the vault already has. If encrypted iCloud backup is on, the file is uploaded already encrypted. If Device Sync is on, it appears on your other Apple devices after they sync. If the vault is a hidden vault, the capture is inside it and shares its deniability. If you trigger duress mode, it goes with everything else.

Which vault you shoot into is therefore a real decision. A photo taken into your everyday vault behaves like your everyday vault. A photo taken into a vault that has no backup and no sync stays on that one device until you move it.

What Secure Camera Is Not

It is not a surveillance or security camera product. It does not monitor a room, stream to another device, or record on motion. It is a capture path into an encrypted vault, and nothing else.

It does not hide that Vaultaire is installed. Someone holding your phone can see the app. What they cannot do is open a vault without the pattern, or find your captures in Photos.

It also does not protect you from someone watching over your shoulder while you shoot. Encryption starts when the capture is kept. Everything before that is the same physical world as any other camera.

Importing Photos You Already Took

Secure Camera covers everything from now on. For what is already in your library, Vaultaire imports from the Photos picker and accepts files from the iOS share sheet. Import copies the file into the vault and encrypts it there. Removing the original from Photos, including the Recently Deleted album, is a step you do yourself, and it is worth doing on the same day rather than later.

Frequently Asked Questions

Is there a photo vault app where you can take pictures inside the app?

Yes. Vaultaire's Secure Camera opens inside an unlocked vault. You shoot, review, and keep, and the image is encrypted into that vault. It is never added to the camera roll, so there is no original to delete afterwards.

Does Secure Camera save to Apple Photos?

No. Vaultaire never calls the Photos save API for a capture. Nothing appears in your camera roll, in Recently Deleted, or in iCloud Photos.

Can I record video without giving microphone access?

Yes. Camera permission is required, microphone permission is not. Decline it and you record silent video with an audio-off badge shown on screen.

Is video encrypted while it is being recorded?

No, and any app that claims otherwise on iOS is worth a second look. Recording writes to a temporary MP4 in app-private storage with Data Protection complete and backup excluded. Vaultaire encrypts the video into the vault after you keep it, then overwrites and deletes the temporary file.

Can I move photos already in my camera roll into the vault?

Yes, through the Photos picker or the share sheet. Import copies the file in and encrypts it. Deleting the original from Photos is your step, and Recently Deleted holds it for 30 days unless you empty that album.

Do Secure Camera photos appear on my iPad?

Only with Device Sync turned on for that vault. Without it, a capture stays on the device that took it.

Does the Secure Camera work with no internet connection?

Yes. Capture, review, and encryption run on the device. The network is used only for optional encrypted iCloud backup and Device Sync.

Shoot Where the File Belongs

Take the photo inside the vault that will hold it. No camera roll copy, no delete to remember.

Download Vaultaire Free