A clear way
to your next step.

Hidden vaults and the decoy

Sanctum never shows a list of vaults. Draw a vault’s pattern on the lock screen and that vault opens. To add one, open the vault you’re in, tap the stacked-squares button → Create another vault, then choose a different pattern. Free includes 3 vaults; Pro has no limit.

A second vault with everyday photos works as a decoy: if someone insists, draw that pattern. Each vault has its own pattern, recovery code and encryption key. Keep Private Backup off for a vault you keep hidden, because its backup file in iCloud Drive would show that it exists.

Forgot your pattern?

On the lock screen, choose Use my recovery code. Enter the full code saved for this vault and continue. This opens the existing encrypted collection; it does not replace or recreate your files. Pattern retry delays do not apply to the recovery code. If the app says this iPhone no longer holds your pattern’s device key (for example after moving to a new phone), the recovery code is the way back in; then choose a new pattern.

After recovery, open Protection & storage → Recovery & encrypted backups to change your pattern and recovery code. Save the new code and complete its full confirmation. A code from an older backup may not unlock a vault whose credentials have since changed.

Without your current pattern or matching recovery code, Sanctum cannot unlock the vault for you. Older device-authenticated vaults still use their original Apple authentication until you choose to add a private pattern. Stop screen recording or mirroring before attempting to unlock.

Backups: automatic, and on demand

Private Backup keeps an encrypted copy of your vault in your iCloud Drive, in a folder called Sanctum. It’s on by default for your first vault; find it in Settings (the i button) → Private Backup. Backups run while the vault is open, replace the previous copy, and show “Uploading to iCloud…” until Apple has the file. iCloud Drive must be on in iOS Settings, with space available.

You can also save a backup file anywhere: Settings → Recovery & encrypted backups → Save a backup file, enter your recovery code, and choose a location. Either kind of backup opens only with that vault’s recovery code.

Restore into a new vault slot

On a new iPhone, install Sanctum and tap Restore a backup on the first screen. Pick the file (automatic backups are in iCloud Drive › Sanctum), enter the recovery code that was current when it was made, then choose and confirm a new pattern. If other vaults are already on the phone, tap Create another vault and choose Restore a backup on the next screen.

Restoration verifies the entire archive before publishing into a new, absent vault slot. Other vaults remain unchanged. A backup of a vault already on this iPhone is rejected; restoration never duplicates, merges with or overwrites an existing vault. A recovery code alone cannot restore missing media.

If restore fails, keep the original archive unchanged and check its matching code, available iPhone storage and whether the file is fully downloaded. Do not remove an existing vault to retry. Later pattern or code changes do not update or revoke old backup copies; each still needs its original code.

Bring photos and videos in

In the unlocked collection, tap the orange import button, then choose Photos or Files — photos & videos. Select photos or iOS-playable videos. Files import is media-only: it is not document or note storage. Sanctum has no in-app camera or encrypted person-to-person sharing.

Import did not finish?

Check available iPhone storage, then confirm that the selected photo or video is available from Photos or your chosen Files provider. An original in iCloud Photos or a remote Files location may need to download first. Keep Sanctum active while importing; backgrounding locks the vault and can interrupt the operation.

Imports are bounded to 120 MiB per photo and 20 GiB per video, with additional free storage needed for processing. Try a smaller selection and check which items already reached the collection before retrying. Live Photo motion is not guaranteed to be preserved.

Sanctum imports copies and leaves originals at the chosen source in Photos or Files. Verify that each imported item opens correctly before deciding to remove any originals. Source providers, Photos’ Recently Deleted album and other synced copies are managed separately from Sanctum.

Save an original to Files

Open the photo or video in the viewer and choose Export original to Files. Read the warning, then choose Prepare & save to Files and a destination. Your encrypted vault item stays unchanged. This is not an encrypted backup.

The saved copy is plaintext, not encrypted by Sanctum. Your Files provider may upload or cache it outside the app. Sanctum cannot recall that copy; locking or deleting the vault does not remove it. Provider acceptance of a save does not mean a remote upload has finished.

Temporary app-owned export copies use complete iOS file protection and cleanup after dismissal. This is not a secure-wipe guarantee and does not protect copies retained by the destination provider. Use an encrypted backup instead if you need a protected archive.

Deleted something accidentally?

Open Recently Deleted from the collection and restore the item. It remains encrypted and has no automatic timer purge. Confirmed permanent deletion removes Sanctum’s stored copy and cannot be undone inside the app.

Originals in Photos or Files, exported copies and older encrypted backups may still contain the item. A local permanent deletion does not change those copies. An older backup can bring back items it contained only when restored into a new, absent vault slot; it cannot be restored over a vault already on this phone.

Your credentials stay yours

Never share a pattern, recovery code, encryption key, private media or vault backup in a support request. These self-service guides are available during development; direct support contact is not yet available. Sanctum has no credential-reset or missing-file recovery service.

Read how protection works for the security design and limits, or the privacy policy for data handling.

Contact us

Email support@sanctum.superapp.now. Never send your pattern, recovery code or vault files: we don’t need them and can’t use them.