Comparison

ArkWarden vs
Keepsafe

Keepsafe encrypts your files, but Keepsafe itself says it is not a zero-knowledge app. ArkWarden has no account and no server, so there are no files for anyone at ArkWarden to see, request, or provide. This page shows exactly what each approach means in practice.

Start protecting your files

The core difference

Encrypted is not the same as zero-knowledge.

Keepsafe encrypts your photos and videos with 256-bit AES, on the device, not just in a cloud backup. That part is real, and it is more than many vault apps do.

But encryption alone does not mean nobody can ever see your content. Keepsafe's own support documentation states plainly that Keepsafe is not currently designed as a completely zero-knowledge app, and that they can technically view or share your data in limited cases: if you ask for support, if required by law, or if they have concerns about a policy violation. That is possible because Keepsafe accounts exist on Keepsafe's servers, tied to your email, with backup and recovery running through that account.

ArkWarden has no account and no server. There is no mechanism, support process, or legal request that could reach your files, because ArkWarden does not have your files.

In short

Keepsafe is a long-running, widely used app with real on-device encryption. It also has an account system, an email-based recovery path, and — by its own admission — is not zero-knowledge. ArkWarden encrypts every file with a key derived from your pattern, with no account, no server, and no path for anyone to access your data on your behalf. If it matters that the app provider does not have access to your files, the comparison below shows each app row by row.

Feature by feature

What each one actually does.

24 points across five categories. Each row shows what the product actually does in practice.

✓ Yes ✗ No ~ Partial

Encryption

Feature	ArkWarden	Keepsafe
File encryption Every file is encrypted individually on your device	✓ AES-256-GCM + ChaCha20-Poly1305, always on	✓ 256-bit AES, applied on-device at rest
Pattern-derived encryption key Unlock pattern creates the encryption key that protects your files	✓ PBKDF2 with 600,000 iterations on every unlock	✗ PIN or biometric unlocks the vault; not stated as the key source
Unique encryption per file Identical files always produce different encrypted output	✓ Each file encrypted independently	~ Not stated
Encrypted vault metadata File names, folder structure, and vault information remain encrypted	✓ Metadata encrypted alongside file content	~ Not stated
Device-locked key protection Keys are protected by the iOS Keychain, encrypted at rest by the Secure Enclave	✓ Master key encrypted in Keychain, device-locked	~ Not stated

Authentication

Feature	ArkWarden	Keepsafe
Pattern unlock Draw a pattern instead of typing a password	✓ 5x5 grid, pattern is the encryption key source	~ PIN or Pattern passcode available, but does not derive an encryption key
Biometric unlock Unlock with Face ID or Touch ID	✓ Optional second factor via Apple's Secure Enclave	✓ Touch ID / Face ID supported
PIN unlock Separate PIN as a second authentication factor	✓ 6-digit PIN, independent of device passcode	✓ Primary unlock method
Hardware security key Physical key as a second authentication factor	✓ YubiKey over NFC, FIDO2	✗ Not available
Independent from device passcode Device passcode does not open the vault	✓ Pattern and passcode are completely separate	✓ App has its own separate PIN or Pattern

Privacy

Feature	ArkWarden	Keepsafe
No account required No email address, registration, or personal identity required	✓ No sign-in of any kind	✗ Account with name and email required at setup
No server dependency Vault exists only on your device	✓ No server at all	✗ Account login, backup, and PIN reset all require Keepsafe's servers
No advertising No ads, trackers, or advertising network integrations	✓ Funded by direct payment only	✗ Free Basic tier is ad-supported. Ads removed with Premium.
No personal identifier No account, no email, no identity attached to your vault	✓ No identity, no profile, nothing linked to you	✗ Email required and verified at account creation
Screenshot protection Screenshots are blocked throughout the app	✓ Blocked throughout the entire app	~ Not stated
Fully offline All features work without an internet connection	✓ No network required for any feature	~ Vault unlock works offline. Login, backup, and PIN reset require a connection.
Open source The code that protects your files is public and can be reviewed	✓ The encryption that protects your files is open source	✗ Closed source
End-to-end encrypted backup Backup where only you hold the key to decrypt it	✓ iCloud or exported file, encrypted on device, only you hold the key	~ Backups are encrypted, but the account (tied to your email) is the recovery path

Vault

Feature	ArkWarden	Keepsafe
Alternate vault with a separate pattern A second fully functional vault, opened by a different pattern	✓ Wing: a second vault with its own pattern, name, and files, at every tier. Nothing in the app indicates it exists.	~ Decoy Vault: a second gallery under a different PIN. Premium only. Moving files between vaults requires exporting and re-importing them.
Folder organization Group files into named folders inside the vault	✓ Unlimited folders. Create and drag files between them.	✓ Albums, with optional per-album PIN codes on Premium
Recovery phrase Regain access if the pattern is forgotten	✓ BIP-39 phrase, 12 or 24 words	✗ Recovery via verified account email. Requires a server.

Files

Feature	ArkWarden	Keepsafe
Capture photos and videos in-app Take a photo or video that goes straight into the vault, never to the camera roll	✓ Captured directly into the encrypted vault. Never written to the Photos library.	✓ Integrated camera captures directly into Keepsafe
Documents, PDFs, and audio Store files beyond photos and videos	✓ Any format from the Files app	~ PDF supported. No audio format listed.
Unlimited storage No file count or size cap inside the app	✓ Device storage is the only limit	~ Cloud backup capped at 200 items free, 10,000 on Premium. Local storage limits not stated.

Honest limits

Where Keepsafe has the advantage.

Hundreds of thousands of ratings. Keepsafe has been on the App Store for years with a large, established user base.
Real on-device encryption. Unlike some vault apps, Keepsafe applies 256-bit AES encryption to files at rest on the device, not only to a cloud backup.
Cross-platform sync. An account lets you access the same vault from Keepsafe on other devices and platforms, which a device-only design like ArkWarden's does not offer.
Android support. Keepsafe is available on Android. ArkWarden is iPhone only.

What no account changes

Situations where an account is the risk.

You want to make sure no one can look at your files.

Keepsafe's own documentation says plainly that it is not a fully zero-knowledge app, and that Keepsafe can view or share your data in specific cases, including at your request for support or if required by law. That is not a flaw in how they built it. It is a consequence of having an account system and a server at all. ArkWarden has neither, so there is no account for a request to reach and no server copy to provide.

You do not want your vault tied to an email address.

Keepsafe requires a verified email at signup, and both PIN resets and new-device logins go through an access code sent to that email. That email is a permanent link between your identity and your vault. ArkWarden has no account and no email. Recovery uses a BIP-39 phrase you generate on your device and write down yourself.

You want a second vault, not a second gallery.

Keepsafe's Decoy Vault is a Premium feature: a second gallery under a different PIN. Keepsafe's own instructions for moving files between the real and decoy galleries require exporting them to unencrypted form and reimporting them, which suggests genuinely separate storage. But it does not describe a separate encryption key, and it is not available on the free tier. ArkWarden's Wing is generated from an independent 256-bit key derived from its own pattern and available at every tier, so the Wing pattern can never mathematically open the main vault.

You want no ads, at any tier.

Keepsafe's free Basic tier is ad-supported, and their own data documentation describes advertising partners using cookies and similar technology to target ads to Basic users. ArkWarden has no ads at any tier, free trial or paid.

You want the encryption itself to be checkable.

Keepsafe's app is closed source. You can read what they say about their encryption, but not the code that implements it. The encryption that protects your files in ArkWarden is open source, so you can read the code that turns your pattern into a key and encrypts your files yourself.

Sources

Where the claims come from.

Claims about Keepsafe are based on their own App Store listing and support documentation. Claims about ArkWarden's encryption are based on published standards.

Secret Photo Vault: Keepsafe on the App Store — App Store listing used as source for stated features and pricing.
Privacy & Security — Keepsafe Support — source for the 256-bit AES at-rest claim, the zero-knowledge statement, PIN lockout behavior, and email-based access codes.
Using Photo Vault — Keepsafe Support — source for general product behavior and the Decoy Vault export/import requirement.
NIST FIPS 197: Advanced Encryption Standard (AES) — the standard that supports AES-256-GCM used by ArkWarden.
NIST SP 800-38D: GCM Mode for Block Cipher Algorithms — the standard that supports the GCM authenticated encryption mode used by ArkWarden.
NIST SP 800-132: Password-Based Key Derivation — the standard that supports PBKDF2 used by ArkWarden.
Apple Platform Security: Secure Enclave — covers hardware-backed key protection on iOS.

Common questions

What people usually ask next.

Is Keepsafe zero-knowledge?

No, by Keepsafe's own admission. Their support documentation states Keepsafe is not currently designed as a completely zero-knowledge app, and that they can technically view or share personal data in limited cases, including if you ask them to for support, if required by law, or if they have concerns about a Terms of Service violation. ArkWarden has no account system and no server, so there is no mechanism through which we could access your files even if asked.

Does Keepsafe encrypt files on the device?

Yes. Keepsafe's support documentation states that files are encrypted with 256-bit AES at rest, on the device, not only in backup. This is a real difference from some other vault apps, which only encrypt cloud backups. ArkWarden also encrypts every file on the device, using AES-256-GCM with a key derived from your pattern rather than a stored account credential.

What happens if I forget my Keepsafe PIN?

You recover it through your verified account email. Keepsafe requires an email address at signup, and PIN resets and new-device logins both go through an access code sent to that email. ArkWarden uses a BIP-39 recovery phrase of 12 or 24 words that you write down yourself. No email address or account is involved.

Is Keepsafe's Decoy Vault the same as ArkWarden's Wing?

Not quite. Keepsafe's Decoy Vault is a Premium feature that opens a second gallery under a different PIN. Keepsafe's own documentation shows that moving files between the real vault and the Decoy Vault requires exporting them to unencrypted form and re-importing them, which points to genuinely separate storage rather than a simple filtered view. ArkWarden's Wing works differently: it is generated from an independent 256-bit key derived from its own pattern, so the Wing pattern can mathematically never open the main vault. Wing is also available at every tier, not limited to a paid plan.

Does Keepsafe have ads?

Yes, on the free Basic tier. Keepsafe's own data documentation states that ad-supported use involves advertising companies using cookies and similar technology to serve targeted ads, and that ads are removed for Premium subscribers. ArkWarden has no ads at any tier.

Can I use both apps?

You can. Keepsafe has real strengths ArkWarden does not try to match: cross-platform sync, Android support, and a much longer track record. If you need those specifically, Keepsafe may fit. If having no account and no server matters more to you than cloud sync, ArkWarden is built around that trade-off instead.

See it in practice

Situations where having no account matters.

ArkWarden

Nothing to see,
because there is no account.

ArkWarden encrypts every file individually with AES-256-GCM. No account, no ads, no server. Your pattern is the key.

Install on iPhone. No account, no email.
Point your camera at the code.

Read about on-device privacy

AES-256-GCM + ChaCha20-Poly1305 file encryption Pattern-derived key, never stored or sent anywhere No account, no ads, no server

ArkWarden vsKeepsafe