# Vaultron (vaultronsoft.app)

> Zero-knowledge AES-256-GCM encrypted photo, Live Photo, 4K video, scanned PDF, and private note vault for iPhone and iPad (iOS 17.0+ / iPadOS 17.0+), published by Treegarden Software Ltd.

## Verified Architecture & Specifications
- **Cipher & Key Hierarchy**: 600,000-iteration PBKDF2-HMAC-SHA512 per-slot KEK -> 256-bit Master Vault Key (pinned in physical RAM via posix_memalign + mlock and cleared via memset_s) -> HKDF-SHA512 per-file FEK, 512-byte VFIL envelope key, and thumbnail TEK -> streaming 256 KB (262,144-byte) AES-256-GCM chunks committed via F_FULLFSYNC.
- **Four Unlock Modes**: 6+ digit Numeric PIN, NFKD Alphanumeric Passphrase, 5x5 Pattern Grid (25 nodes, minimum 6 unique dots with at least 1 turn), plus optional Apple Secure Enclave P-256 ECIES Face ID / Touch ID (with 1-tap travel disable and 14-day PIN rehearsal reminders).
- **4,096-Byte 8-Slot Binary Header**:
  - Slot 0: Primary Vault credential
  - Slot 1: 12-word BIP-39 offline Recovery Phrase (with printable US-Letter PDF kit)
  - Slot 2: Hardware Secure Enclave P-256 biometric envelope (biometryCurrentSet)
  - Slot 3: Optional secondary credential
  - Slots 4 to 5: Unallocated CSPRNG-padded slots
  - Slot 6: Optional Duress Wipe (destroys local Primary partition and halts CloudKit sync)
  - Slot 7: Non-destructive Decoy Vault (status bits masked to 0 on disk)
- **Private CloudKit Sync (Pro)**: Uses Apple CKSyncEngine in container iCloud.com.vaultron.app (custom zone VaultronEncryptedZone_v1) storing EncryptedVaultItem records with .vault CKAsset streams and AES-256-GCM encryptedMetadata envelopes.
- **Offline Desktop & Cross-Platform Recovery**: Ships emergency_decryptor.html (72.0 KB, SHA-256 b5bf0919b834c00fbee9128054a2b13c0d745bd8ce1e0727d23be2a49c018823, CSP: default-src 'none') to unlock 64-bit ZIP64 .vaultbackup archives and Encrypted Share Packs offline in any macOS, Windows, or Linux browser.
- **Plans & Never-Hostage Policy**:
  - Free Vault ($0): Up to 200 photos/documents/notes + 20 videos (220 items total), all 4 unlock modes, VisionKit PDF scanner, Safe Hand-Off Lock, EXIF/GPS cleaner, Encrypted Share Packs, and .vaultbackup export/restore.
  - Vaultron Pro: $4.99/month or $19.99/year (with 7-day free trial); Family Annual $49.99/year. Unlocks unlimited items, Direct-to-Vault camera, Decoy/Duress/Mode B setup, automatic Private iCloud Sync, and 4 discreet Home Screen icons.
  - Lifetime Unlock: $39.99 one-time (individual) or $99.99 one-time (Family Sharing).
  - Never-Hostage Guarantee: Unlocking, viewing, sharing, and exporting existing items remain 100% free forever even if a subscription expires.

## Canonical URLs
- Overview: https://vaultronsoft.app/
- Cryptographic Whitepaper: https://vaultronsoft.app/security
- All Capabilities: https://vaultronsoft.app/features
- Competitor Comparisons: https://vaultronsoft.app/compare
- Vaultron vs Vaultaire: https://vaultronsoft.app/compare/vaultron-vs-vaultaire
- Vaultron vs iPhone Hidden Album: https://vaultronsoft.app/compare/vaultron-vs-apple-hidden-album
- Vaultron vs Keepsafe: https://vaultronsoft.app/compare/vaultron-vs-keepsafe
- Offline Emergency Decryptor: https://vaultronsoft.app/decryptor
- Browser EXIF & GPS Cleaner: https://vaultronsoft.app/tools/photo-exif-metadata-remover
- Passcode & PBKDF2 Entropy Calculator: https://vaultronsoft.app/tools/vault-passcode-entropy-calculator
- Support & Upgrade Guide: https://vaultronsoft.app/support
- Privacy Policy: https://vaultronsoft.app/privacy