VAULT

An offline vault.
Nothing leaves this machine.

Download for macOS

Free · macOS 14 or later

There are things you would never upload.

A scan of your passport. The tenancy agreement. Last year's tax return. You know exactly which ones they are, because you hesitate before you attach them.

And yet they are already somewhere. They have to live in some folder, and every folder I had was a folder that syncs.

Not one of those is a bad product. Every one of them is somewhere else, run by someone else, reachable by someone else. I wanted one place that was not.

It stays here.

No cloud.No account.No server.

I never built anywhere else for it to go — so there is nothing out there to break into, and nothing of yours for me to lose.

Introducing Vault.

What it is, and why it behaves the way it does.

Four kinds of things. One lock.

Documents, photos, video and passwords sit under the same encryption and the same four keys. The tab is the only difference between them. That is the whole reason a passport scan can live in here at all.

The documents tab
Documents
The photos tab, a grid of thumbnails
Photos
The video tab
Video
The passwords tab, a list of entries
Passwords

Screens show sample data, not a real vault.

One box. Four keys.

Everything you keep goes in one place. Four different things open it, and none of them ranks above the rest — three exist for the day you cannot remember the one you chose.

Documents, photos, video, passwords Password Recovery key Hint answer Touch ID

Three decisions you would not notice.

None of them shows up in a feature list. All three are the reason it behaves the way it does.

1

Changing your password does not touch what is inside.

Only the outer layer is redone. Nothing inside is re-encrypted, so changing it is instant no matter how much you keep.

2

Nothing compares your password to a stored copy.

Because no copy exists. The wrong key simply fails to open it — there is no check that could return true, and nothing to steal.

3

Search reads everything around a password, never the password.

If you could search it, you could guess it: type a few characters, see how many entries survive. That was worth giving up.

Take it.

Download for macOS Free · open source
RequiresmacOS 14 or later. Apple Silicon and Intel.
CostsNothing. There is no account to make and nothing to subscribe to.
Your dataTwo files and an attachments folder under ~/Library/Application Support/Vault/. Nowhere else.

The app is not signed, so macOS will stop you the first time.

Open System Settings → Privacy & Security, scroll down, and press Open Anyway. You only have to do it once. Touch ID is switched off in this build for the same reason — signing costs $99 a year and I have not paid it yet.

How it was made.

Built in conversation with Claude over three days. How it behaves came from using it. How it is built came from the conversation.

ConceptShih-Bo Chiu
An offline box for the things you would not upload — and what it refuses to do.
DirectionShih-Bo Chiu
The storybook visual language, the main screen, and every trade-off after it.
Architecture & buildPaired with Claude
The four key paths and the Swift implementation, worked out line by line.
TestingDaily use
The bugs that mattered were found by using it, not by testing it.
Built withNative SwiftUI. No frameworks, no package dependencies.
EncryptionAES-GCM for the data. PBKDF2 with 600,000 iterations on every key path.
Verified by103 checks that run before every release, including two that guard decision 3.
Sourcegithub.com/qiushibo-dev/vault — read it, the comments explain the decisions.