About Vaultify
Hide & conceal your media. Lock it safely inside any regular photo or video. Reveal and unlock it whenever you need it — a snapWONDERS product by goldenSoftwareENGINEERS®.
What is Vaultify?
Vaultify lets you hide and conceal your files inside any regular photo or video — locking your content safely so only you can retrieve it. Upload the files you want to hide, choose a photo or video to hide inside, and Vaultify conceals them. When you're ready, use the Reveal flow to unlock and extract your hidden files from that photo or video.
Beyond the hide and reveal tools, Vaultify also provides a REST API and MCP server for privacy-critical media operations — analyse, convert, and scrub digital files without trusting a third-party cloud service with your data.
Why does it exist?
Vaultify was born from a vision Huey had — that digital media could carry personal stories, accessible to those they were meant for and invisible to everyone else. After his passing, that idea became the foundation of what we built. Accessibility and privacy aren't features we added; they're the reason Vaultify exists.
Every photograph, document, and video you create also carries invisible metadata: GPS coordinates, device serial numbers, and creation timestamps embedded by default by virtually every camera and app. When you share those files, you share that metadata. Vaultify lets you audit and strip that data before sharing — via a clean API, from any language, on any platform, including Tor and I2P.
Read our full storyMulti-network by design
Vaultify runs natively on three independent networks simultaneously: clearnet (HTTPS), Tor (.onion), and I2P. All three provide the same tools with no functional differences. There is no clearnet fallback and no cross-network leakage. Use the network that best matches your privacy needs.
Security & Encryption
Every hide job requires a password — there is no option to embed content without one. Your password never leaves your device in a usable form; only the cryptographic result of processing it is used during embedding.
AES-256-GCM encryption
All hidden content is encrypted with AES-256-GCM before it is hidden inside the photo or video. AES-256 is the cipher specified by the NSA for TOP SECRET classified information and is widely adopted by militaries and intelligence agencies around the world. The GCM mode also provides authentication — decryption fails with a clear error rather than silently returning corrupt data.
Argon2id key derivation
Your password is never used directly as an encryption key. It is first processed through Argon2id — the winner of the international Password Hashing Competition — which is deliberately memory-hard and computationally expensive. This makes brute-force attacks (trying millions of passwords per second using GPUs or specialised hardware) impractical even against a powerful attacker who has obtained the photo or video.
Image-bound key
The encryption key is uniquely tied to your specific photo or video. A copy of the same photo from a different source — even one that looks identical — will not produce the same key. Always use the original, unedited file when revealing your content.
Vault Lock (Pro)
Pro accounts can enable Vault Lock, which adds a server-held secret to the key derivation. The final encryption key requires both your password and a token held on our servers — neither alone is sufficient to decrypt anything. We never hold your password, so we cannot access your content regardless. Vault Lock goes a step further: if you revoke a vault profile, its token is permanently deleted from our servers, making the content irrecoverable by anyone — even if the password is subsequently leaked or guessed.
What we do not do
- We do not store your password or any form of it on our servers.
- We do not retain your uploaded files after your session ends.
- We do not have a "master key" or back door — we cannot decrypt your content on your behalf.
- We do not log the content of hide or reveal operations.
A snapWONDERS Product
Vaultify is a product that runs under snapWONDERS, developed by goldenSoftwareENGINEERS® — a software house focused on privacy-respecting tools and digital media. Questions, feedback, and bug reports are welcome via the contact form.
