Draw a pattern.
Open your vault.

Pattern unlock is how you open ArkWarden every day. You draw a pattern on a 5x5 grid, and ArkWarden strengthens it with your iPhone’s Secure Enclave. Your vault is protected by the pattern you know and the phone you use. No typing, no account, no server.

Draw a pattern. Open your vault.
Step by step

From the first dot to an unlocked vault.

Pattern unlock looks simple on screen by design. Behind that gesture, ArkWarden checks your pattern, your vault, and your iPhone before the vault opens.

1

You touch the first dot

ArkWarden records each dot you touch and the order you touch them in. That sequence is your pattern.

A new pattern must use at least six different dots and two direction changes. If it is too short or too simple, ArkWarden asks you to choose a stronger one. You can use more dots if you want a longer pattern.

2

ArkWarden creates the unlock key

ArkWarden unlocks your vault and strengthens it with your iPhone’s Secure Enclave. This security chip provides a key that cannot be copied out of the device. Your vault is protected by your pattern and your iPhone together.

Unlock stays quick on your iPhone. Guessing cannot move to a faster computer, because each attempt needs a Secure Enclave key that cannot leave your phone.

3

The key opens the vault

ArkWarden does not store your pattern. It stores your master key encrypted under a key derived from your pattern and a Secure Enclave key that cannot leave your iPhone. What happens instead:

  • The master key for your vault is stored in the Keychain, encrypted so only the right unlock key can open it.
  • ArkWarden tries to unlock the master key with the key created from your pattern and your iPhone.
  • If the key is correct, the master key unlocks.
  • If the key is wrong, decryption fails and the vault stays locked.

The vault opens only when that key successfully opens the master key.

4

Your vault opens

After the master key unlocks, ArkWarden can show your files. If you have a second factor enabled, such as Face ID, a PIN, or a YubiKey, ArkWarden checks it before opening the vault.

When you lock the app or close it, the unlocked master key is released from memory. The next time you draw your pattern, ArkWarden runs the unlock calculation again.

Your files are only readable after the correct pattern unlocks the master key. On disk, they stay encrypted.
The difference

Why a pattern beats a password for daily use.

A strong password does not help if it is too difficult to use every day. Pattern unlock works because it is fast enough that people actually use it.

A 4-digit PIN A typed password Face ID alone Pattern unlock
Time to unlock About a second Two to five seconds Under a second About a second
Possible combinations 10,000 Depends on the password (often weak) Not applicable Grows with every added dot on the 5x5 grid
Copied-vault guessing Depends on app Depends on app Not applicable Requires your iPhone
Resists shoulder surfing Poor. Easy to read four digits. Poor. Visible keyboard taps. Excellent. Good. Speed and shape complexity make recall difficult.
Resists smudge inspection Limited. Numbers smear obviously. Good. Many keys touched. Not applicable. Good. Dots show but not the order or direction.
When someone forces you to unlock Only one key. No alternative. Only one key. No alternative. Forces you to look at the camera. A second pattern opens a second vault instead.
If you forget Reset, usually with no consequence Reset, usually via email Falls back to passcode BIP-39 recovery phrase you set during setup

Remembering a movement is easier than remembering a password.

People forget passwords. They rarely forget a repeated hand movement. Pattern unlock uses the same kind of motor memory. After a few uses, your hand draws the pattern faster than your mind can describe it. Patterns drawn from muscle memory are difficult to dictate, difficult to write down, and difficult for someone watching to copy at speed.

Speed is a security feature.

Every extra second on the unlock screen is a second when someone else might observe you. You are looking at the phone, the phone is awake, the contents are within tap distance, and other people may be able to see the screen. An unlock method that is simple enough to become part of your daily routine is more secure in practice than a twelve-character password that requires several extra steps to retrieve.

The unlock is also the key.

Most apps separate the unlock step from the encryption. You type a password, the app confirms that it matches, then loads files that were already readable on disk. In ArkWarden, the pattern helps unlock the master key. There is no readable file state before the pattern is drawn.

For the curious

What the unlock screen is actually doing.

None of this is required to use ArkWarden, but if you want to verify our claims, this explains the system after the gesture. See the full security overview.

What ArkWarden requires of your pattern

Rule Value Why
Minimum different dots 6 Filters out very short patterns like a single line or a small L shape.
Minimum direction changes 2 Prevents straight-line patterns and the predictable corner-to-corner shapes that dominate published lock-pattern datasets.
Grid size 5x5 Gives you more possible routes and longer patterns than a six-digit passcode.

ArkWarden rejects new patterns that do not meet these minimum rules.

What happens on every unlock attempt

The unlock screen collects your pattern and loads the random salt for your vault from the iOS Keychain. ArkWarden runs PBKDF2 at 600,000 iterations to turn your pattern into a key. It then combines that key with a secret from the Secure Enclave key created when you set up your vault. The combined result unlocks your master key. If that succeeds, the master key enters memory and the vault opens. If it fails, the grid clears for another try. A second factor check runs after a successful unlock, if you have one enabled.

The Secure Enclave key cannot be exported. Copied vault data alone cannot complete current pattern unlock on another device. Moving the copied data to a faster computer does not move the missing Secure Enclave key with it.

ArkWarden does not use a stored pattern hash to approve an unlock. The vault opens only when the derived key successfully opens the master key.

Pairing with a second factor

The pattern is the first factor. It helps unlock the master key. The second factor, if you enable it, is a separate check placed after the master key unlock. You can choose Face ID or Touch ID (biometric data never leaves your device), a 6-digit PIN stored in the Keychain, or a physical YubiKey over NFC. You can also use no second factor at all. ArkWarden does not pressure you into a particular choice.

Wing: the same screen, a second vault

ArkWarden lets you set a second, completely separate pattern called Wing. Wing opens a different vault with its own name, icon, color, and files. The two patterns live on the same lock screen. Nobody looking at your phone can tell which pattern opens which vault, or that a second pattern even exists. Wing is designed for the situation where you are asked to unlock your vault by someone you cannot refuse.

What pattern unlock does not protect against

  • Your pattern cannot be tested against copied vault data on another device, but it can still be watched. Someone who sees or records it can learn the shape. Draw in private when you can, and turn on Stealth Pattern in Settings when you cannot.
  • If you lose both your pattern and your recovery phrase, the vault cannot be recovered by anyone, including us. That is the design. Keep your recovery phrase somewhere safe.
  • Pattern unlock does not replace your iPhone lock screen. It protects the files inside ArkWarden. Lock your device too so that ArkWarden is not the only protection between your phone and an attacker.
Common questions

What people usually ask next.

Is the pattern stored anywhere on my device?
No. ArkWarden never stores your pattern. It stores your master key encrypted under a key derived from your pattern and a Secure Enclave key that cannot leave your iPhone. When you draw your pattern, ArkWarden derives that key and tries to open the master key. The pattern stays in memory only long enough to run this unlock calculation.
Is my pattern ever sent to ArkWarden?
No. Unlocking your vault does not use the network. Your pattern helps create a key on your iPhone, the key opens your vault, and then the key is released. Nothing about the unlock process leaves your device. There is no ArkWarden server for it to reach.
What happens if someone copies my encrypted vault data?
It stays locked. Current pattern protection needs a non-exportable Secure Enclave key from your iPhone. Copied vault data alone cannot complete pattern unlock on another device because that key cannot be copied or moved. On your iPhone, ArkWarden waits 15 minutes after 10 failed attempts.
How does ArkWarden protect pattern unlock on my iPhone?
ArkWarden requires two things together: your pattern and your iPhone. Your pattern goes through PBKDF2 at 600,000 iterations, which adds work to every guess. ArkWarden then combines the result with a secret from the Secure Enclave, a separate security chip inside your iPhone. The key inside that chip never leaves it.
Can someone unlock my vault by trying random patterns?
No. A wrong pattern produces a wrong key, and the vault stays locked. There is nothing left behind that shows whether a guess was close. Guessing also has to happen on your iPhone, because pattern unlock needs a Secure Enclave key that cannot leave the device, and ArkWarden waits 15 minutes after 10 failed attempts.
Can a pattern be strong enough for encryption?
Yes. ArkWarden uses a 5x5 grid and requires new patterns to visit at least six different dots and make at least two direction changes. The larger grid gives you more room to create a long pattern than a six-digit passcode, and every added dot increases the number of possible sequences. Each guess is also deliberately slow to check, and guessing only works on your own iPhone. Together that makes pattern guessing a much harder target than it looks.
Can I unlock with Face ID instead of the pattern?
No. Face ID and Touch ID are available as a second factor, not as a replacement for the pattern. The pattern is what helps unlock your master key. Without the pattern, the calculation that opens your vault never runs. Biometrics control access. They do not create the key that decrypts your files.
How do I use ArkWarden on a new iPhone?
Use a backup and its recovery phrase. Install ArkWarden on the new iPhone, choose restore, select the backup, enter the 12 or 24 word phrase that protects it, and set a pattern for that device. Your files come back from the backup.
What happens if I forget my pattern entirely?
Use your recovery phrase. During onboarding, ArkWarden generates a 12 or 24 word BIP-39 phrase that you save somewhere off the device. On the unlock screen, choose "use recovery phrase," enter the words, and set a new pattern. Without the pattern and without the phrase, the vault cannot be recovered by anyone, including us. Learn more about the recovery phrase.
Can I change my pattern later?
Yes. Settings has a Change Pattern flow. You verify the current pattern, draw a new one, and confirm it. The master key is encrypted under the new pattern-protected key. Your files are not re-encrypted because they do not need to be. The master key stays the same. Only its protection changes.
What happens if I draw the wrong pattern?
The grid clears and you can try again. After 10 failed attempts, ArkWarden locks pattern entry for 15 minutes. There is also no telemetry that reports failed attempts anywhere. Your phone is the only thing that ever sees your pattern attempts, successful or not.
Is the 5x5 grid harder to use than a smaller grid?
No. Once you have your pattern, drawing it takes the same gesture regardless of grid size. The larger grid gives you more possible routes without adding more steps to unlock. New patterns must visit at least six different dots and make at least two direction changes.
Can someone figure out my pattern from finger smudges?
Not reliably. Smudges reveal which dots were touched. They do not reveal the order, direction, or connections between them. On a 5x5 grid, the number of valid orderings consistent with any given smudge trail is large enough that smudge inspection alone does not give an attacker a practical way in.
Can someone screenshot the unlock screen?
Your vault is protected. ArkWarden hides its own screens from screenshots and screen recordings, including the unlock screen, your file list, and any file you open. Screens that iOS itself draws, such as the system share sheet, are outside an app's control.
Can I use the same pattern as my iPhone passcode?
You can, but it is a bad idea. Your iPhone passcode controls access to your device. Your ArkWarden pattern controls access to the encrypted vault inside it. Using the same secret for both reduces two independent protections to one. Pick a different pattern for ArkWarden.
See it in practice

Situations where pattern unlock matters.

ArkWarden

A gesture for the things that matter most.

Drawing a pattern is faster than typing a password, harder to copy than a PIN, and what unlocks your master key. ArkWarden uses that pattern, with Secure Enclave protection, to unlock your master key every time you draw it.

Open your vault without typing. Pattern unlock with Secure Enclave.
Scan to download ArkWarden
Install on iPhone. No account, no email.
Point your camera at the code.
Download on the App Store
Read about pattern encryption
5x5 grid, 6 different dots, minimum 2 turns Pattern unlock strengthened by Secure Enclave No password to forget, no account, no server