4.7on the App Store

Your Hidden album isn't actually hidden.
LinkGrow is.

Your photos move into a vault only your pattern can open.
Encrypted on your iPhone with AES-256-GCM. No account, no sign-up, no email, no cloud backdoors.

Free· No Account· Client-Side Encryption
256
9:41
5G

Draw Pattern

Connect 5+ dots to derive AES-256 key

PBKDF2: 600K rdsAES-GCM zero-leak
Interactive Sandbox: Draw to Unlock

LinkGrow is a local-first encrypted vault app for iOS that protects photos, videos, and files with AES-256-GCM under a random master key unlocked by your pattern. It requires no identity account, stores zero decryption keys on servers, and performs all cryptographic derivations client-side on your device.

Zero Accounts

No email or phone number ever requested

Zero-Knowledge

Only your drawn pattern can derive master keys

No Backdoors

Pure client-side cryptographic isolation

Zero Cloud Exposure

Ciphertext only, never readable files

Client-Side Architecture

What Is Zero-Knowledge Encryption?

Your files never leave your device in readable form. We build privacy architecture, not centralized data vacuums.

Core Crypto

5×5 Pattern Encryption

Draw a shape on a 5×5 matrix. PBKDF2-HMAC-SHA512 combines your drawn pattern with a hardware Keychain salt over 600,000 iterations to derive a 256-bit AES vault key.

Learn security spec
Self-Sovereign

Secret Recovery Phrase

Every vault generates a nine-word secret phrase. The phrase derives a separate recovery key opening an encrypted access envelope. Zero central key escrow.

Learn security spec
Stealth Moat

Plausible Deniability

Separate configured patterns address completely separate encrypted vaults. No master vault list is ever shown in the interface, protecting you from coerced inspection.

Learn security spec
Architecture

Hidden Isolated Vaults

The unlock interface gives zero hints of how many vaults exist. Each vault operates on an isolated SQLite database with unique initialization vectors.

Learn security spec
Coercion Panic

Duress Panic Mode

Draw a designated panic pattern under duress: LinkGrow unlocks a harmless decoy vault while silently destroying sensitive local indexes on the device.

Learn security spec
Free + Pro

Encrypted CloudKit Backup

A separate pattern-derived backup key encrypts padded records before CloudKit receives them. Apple only ever stores opaque ciphertext blobs.

Learn security spec
Collaboration

Secure Ephemeral Sharing

Share encrypted vaults with recipients via one-time passphrases. Configure open limits, self-destruct timers, and prevent media exports.

Learn security spec
LinkGrow Pro

Cross-Device Sync

Seamlessly access your encrypted vaults across your iPhone, iPad, and Mac. Data is encrypted before leaving device memory.

Learn security spec
Zero-Trace

Secure In-App Camera

Capture photos and videos directly inside the encrypted vault. Content bypasses the iOS Camera Roll entirely—no originals left behind to delete.

Learn security spec
LinkGrow Pro

Disguise App Icons

Camouflage LinkGrow as a Calculator, Notes app, Printer utility, or Stocks widget. Every icon still routes to the secure pattern screen.

Learn security spec
Zero Backdoors

Defense in Depth

AES-256-GCM protects file contents, EXIF metadata, thumbnail caches, and index trees. Key buffers are zeroed out on deallocation.

Learn security spec
Seamless UX

Instant Unlock & Lock

Security that feels like unlocking your phone. Zero tedious passwords or setup wizards—draw your pattern and start safeguarding files.

Learn security spec
Simple & Uncompromising

How LinkGrow Works

No registration emails, no passwords to forget, no corporate servers.

01PBKDF2 600,000 Rounds

Define Your Pattern

Draw a geometric pattern with at least six dots and one direction change. PBKDF2 derives the local vault key in the app process using a hardware-backed iOS Keychain salt.

02AES-256-GCM Authenticated

Load the Vault

Import photos, videos, confidential documents, and notes. Every file is authenticated and encrypted with AES-256-GCM the millisecond it enters LinkGrow.

03Instant RAM Key Purge

Lock & Vanish

Exit or lock the app. LinkGrow instantly purges active key material from RAM and wipes memory buffers. Unlocked vaults leave zero plaintext traces on disk.

Cryptographic Specs

Security Model: We Don't Trust Servers.
We Trust Math.

Every design decision in LinkGrow is engineered so that even if Apple, AWS, or LinkGrow developers are subpoenaed or compromised, your photos cannot be recovered.

  • AES-256-GCM Authenticated Encryption: Provides both confidentiality and tamper-proof integrity for every payload.
  • PBKDF2-HMAC-SHA512 Key Derivation: 600,000 computation iterations with secure hardware salts defeat brute-force dictionary attacks.
  • Zero Cloud Plaintext: When CloudKit backup is enabled, records are padded and encrypted on-device before transmission.
linkgrow-crypto-spec.ts
FIPS 140-3 Standard
export const vaultCryptConfig = {
cipher: "AES-256-GCM",
kdf: "PBKDF2-HMAC-SHA512",
iterations: 600000,
salt: iOS_Hardware_Keychain_Salt,
nonceLength: 96, // bits unique per record
tagLength: 128, // bits GCM auth
clientSideCloudBackup: true, // padded ciphertext only
zeroMemoryOnLock: true
};
// Servers never receive your master keys.
// Only your drawn pattern or phrase unwraps the vault.

Someone takes your phone.
Now what?

Most vault apps prove you have something to hide. A locked folder or a PIN prompt is an immediate confession. A fake “calculator” app fools nobody who is actually looking.

LinkGrow does not open to a list of named vaults. Each pattern addresses its own isolated encrypted index. Enter Pattern A for decoy family photos; enter Pattern B for confidential records. The interface gives zero indication that Vault B even exists.

The Competitive Reality

How LinkGrow Compares

Real cryptographic mathematics & duress architecture — not a cosmetic PIN screen or calculator disguise.

Security & Privacy FeatureLinkGrowApple Hidden AlbumKeepsafeCalculator Vaults
True AES-256-GCM Encryption YesProprietary Cloud
Plausible Deniability (Multi-Vault) Yes
Duress Panic Wipe Mode Yes
Zero Accounts / No Email Required Yes
Zero-Knowledge Cloud Backup Yes
No In-App Ads / Data Tracking Yes
In-App Direct Camera (Zero Camera Roll) Yes

LinkGrow vs Apple Hidden Album

Why anyone with your device passcode or Face ID can open Apple's album.

Read teardown

LinkGrow vs Keepsafe

How central cloud accounts and advertising trackers compromise your intimacy.

Read teardown

LinkGrow vs Private Photo Vault

Analyzing PIN recovery flaws and cloud sync leakage.

Read teardown

LinkGrow vs Calculator Apps

Why fake calculator apps get flagged immediately during physical searches.

Read teardown
Free Web Utilities

Client-Side Privacy Tools

Free browser-based tools that execute 100% locally on your computer or phone. Your media is never uploaded to any server.

In-Browser WASM

Face Blur & Anonymizer

Detect and redact faces locally in your browser before uploading photos anywhere.

Launch Tool
Client-Side Zero-Trace

EXIF & GPS Stripper

Remove camera model, geo-coordinates, and timestamp metadata from JPEG, PNG & HEIC.

Launch Tool
Zero Uploads

HDR Image Converter

Convert iOS Ultra-HDR and Apple ProRAW formats to private standard color spaces.

Launch Tool
Forensics Utility

Hidden Photo Steganography

Analyze images for embedded payloads or verify cryptographic watermarks.

Launch Tool
Security Research

Latest Guides & Teardowns

Learn the mechanics of mobile surveillance, iOS privacy loopholes, and zero-knowledge storage.

View all 15 guides
iOS Privacy6 min read

Are Hidden Photos Saved to iCloud? (The Real Truth)

If you enable iCloud Photos, your 'Hidden' album is synced to Apple servers by default. Here is how CloudKit syncing works, where your keys reside, and how to stop cloud exposure.

By Julian VanceRead
Teardowns8 min read

Calculator Photo Vault Apps: Are They Safe? (2026 Review)

Calculator photo lockers promise discreet camouflage, but our forensic teardowns of top App Store calculator apps revealed unencrypted media, invasive trackers, and forensic red flags.

By Marcus ChenRead
Cryptography10 min read

AES-256-GCM Photo Vault: Why Standard Passcodes Fail

A 4-digit PIN is not encryption. Discover how PBKDF2 key derivation and AES-256 Galois/Counter Mode mathematically isolate files from physical extraction tools.

By Dr. Elena RostovaRead
Common Questions

Frequently Asked Questions

Everything you need to know about LinkGrow's encryption model and privacy guarantees.

LinkGrow is a local-first encrypted vault app for iPhone. A pattern drawn on a 5×5 grid derives the vault key that unwraps a random AES-256-GCM master key. Separate configured patterns can open separate vaults without a visible cross-vault list. LinkGrow requires no identity account and stores no keys on any server.