SilentBoxDocuments, not just photos
A scanner that crops and straightens the page, multi-page PDFs, document types and a warning before one expires.
Closed beta
A vault that even we cannot see into.
SilentBox keeps photos, scans, PDFs and any other file encrypted on your iPhone and iPad. Encryption happens on the device. We do not have the key and cannot read your content.
iOS 18 and later · iPhone and iPad
A vault for documents, not for photos
What sets SilentBox apart
Six things it was built for. The rest others do too.
It searches inside your scans
Text is extracted from documents on the device and searched through diacritics — “Škoda” finds a document where the scan read “Skoda”. Not one word leaves the vault.
Encrypted backup into your own iCloud
Off by default, turned on by hand. What goes up is the same unreadable block that sits on disk — into your iCloud storage, not onto our servers.
A way out, not only in
Export to plain files with EXIF intact, or to an encrypted archive you can open without SilentBox. How easily a vault can be left is how much it can be trusted.
An iPad that is treated as one
Its own layout with structure and grid, keyboard shortcuts, and dragging an item out as the fastest export. Not a stretched phone.
Face ID, and a lock that holds
Opens with a glance, locks itself after idle time and when you leave the app. A wrong password costs you time, and the wait survives a restart.
Under the surface
How it is built
Security cannot be tried out with a tap, so here at least is what it rests on.
The key is made on your device and stays there
The master key is 256 random bits, never derived from your password — the password only unwraps a copy of it. It exists in memory only while the vault is open; on disk and in the Keychain it is always wrapped.
Encrypted before it is stored
Import reads in blocks, encrypts in memory and writes nothing but unreadable data. A plaintext copy never lands on disk — not even when you share into it from another app.
So is everything around it
File names, albums, dates and extracted text sit in the same envelope as the content. A name like “biopsy-results.pdf” is sensitive on its own.
Without the recovery phrase there is no way back
A forgotten password means lost data — that is a consequence of us not having the key, not a bug. Which is why twelve words on paper belong with the vault, printed when you create it.
The limits
What SilentBox does not do
A promise we cannot keep is worse than a missing feature. These are the limits, written down before anyone has to ask about them.
What SilentBox does not do
- It will not protect you if someone forces you to open the vault. Version 1.0 has nothing for that.
- It will not protect content from a compromised system — a keylogger or malware with kernel rights reads the key while the vault is open.
- It cannot prevent a screenshot. Recording and mirroring hide the content; a single screenshot cannot be stopped.
- It does not hide that a backup exists. The server sees the number of objects, their sizes and when they changed — not the content, names or albums.
- It cannot take data back from a lost phone that already opened the vault. There, the device passcode and remote erase do the work, not us.
How to get in
Closed beta
The app is still being finished. The beta goes out one person at a time, by e-mail, so every answer can be replied to.
Ask for an invitation
The form below. An e-mail address and what you would keep in it.
A TestFlight link arrives
Two taps to install, two to remove.
Tell me what is wrong
What stopped you on the first day is worth the most.
Get in touch
Write to me
For an invitation, a finding, or a question this page does not answer.