Encrypted on this iPhone
Passwords, cards and private files are encrypted with a key kept in the iPhone’s Keychain. They are never sent to us.
The new VaultClean is coming soon
For iPhone
VaultClean checks your iPhone and shows what really needs fixing: leaked passwords, scam texts, risky sites, a passport photo in your camera roll. Then it helps you fix each one, a tap at a time.
Free to check. Premium to fix.



How it works
VaultClean lists only the problems it can prove, from your iPhone’s settings and your own data. No scary pop-ups, no made-up viruses. Fix them one by one and watch the dial turn green.
An example check with 8 problems
Protection
Turn it on once and it keeps working in the background: in Safari, in Messages and in every other app.
Known fake banks, delivery scams and malware sites won’t open, in Safari or any other app. It uses Quad9’s encrypted DNS, so there’s no VPN to manage.
Texts from unknown senders that carry scam links go to Junk. They’re checked on your iPhone and never sent anywhere.
Ads and trackers from ad networks stop loading, so pages are calmer and carry fewer traps.
See which data breaches your email turned up in, and exactly what to do about each one.
Passcode, Face ID and iOS updates, checked against Apple’s own list of releases.

jane@example.com turned up in these breaches.
Breach data from Have I Been Pwned
Passwords
Face ID, and VaultClean fills in the password and the two-factor code. In Safari and in apps.
Each password is offered only on its own site, so a fake page gets nothing.
Codes refresh on their own and fill in with your password. Add one by scanning its QR code.
Finds leaked, weak and reused passwords. To look for leaks, only the first five characters of a one-way code leave your iPhone, never the password.
Import from another password manager, or move them over from Apple’s Passwords app on iOS 26.
Kept next to your passwords, behind the same Face ID.

Private folder
Photos, videos, documents and contacts, behind your PIN and Face ID, and encrypted on this iPhone.
Spots bank cards, passports, IDs and screenshots of passwords in your photo library, right on your iPhone, and offers to move them here.
Every file gets its own key, made from one that never leaves your iPhone’s Keychain.
Face ID opens it in a glance, and your PIN is the fallback.


Cleanup
Find duplicates, forgotten screenshots and big videos. Nothing is deleted until you say so, and deleted photos wait in Recently Deleted for 30 days.
Shots that are the same or nearly the same are grouped, so you keep just the best.
Go through your photos month by month: left to delete, right to keep.
Shrink big videos. The original stays until you choose to delete it.
All the screenshots you no longer need, in one place.
Merge duplicate contacts and finish the incomplete ones.
Nothing is deleted until you confirm.
Privacy
VaultClean has no accounts and no cloud vault. What it protects stays with you.
Passwords, cards and private files are encrypted with a key kept in the iPhone’s Keychain. They are never sent to us.
Finding duplicates and documents happens on the iPhone. Your photos are never uploaded.
The scam filter only sees texts from unknown senders, and decides right there on the iPhone.
To check an address, we ask Have I Been Pwned and don’t store it. The answer is kept a few hours under a one-way code.
VaultClean also uses a few outside services for subscriptions and app analytics. The Privacy Policy names each one.
Price
See everything that needs attention for free. Premium unlocks every fix, and the protection that keeps working in the background.
Know where you stand.
Turn the whole dial green.
Prices are shown in the App Store before you subscribe. You can cancel anytime in Settings.
Questions
No. iPhone apps can’t look inside other apps, and anyone who says they can isn’t being straight with you. VaultClean checks what can really be checked: your iPhone’s settings, your saved passwords, your email and, with your permission, your photos.
Only on your iPhone, encrypted with a key that stays in its Keychain. VaultClean doesn’t sync them to a server, and we can’t see them.
Your vault lives on that iPhone only, so keep a copy of your most important passwords somewhere safe. An encrypted iCloud backup is on our list.
The address goes to VaultClean’s server, which asks Have I Been Pwned and passes the answer back. The address isn’t stored or logged. So that the same address isn’t looked up twice in a row, the answer is kept for a few hours under a one-way code.
No. It switches your iPhone to Quad9’s encrypted DNS, which refuses to look up known scam and malware sites. VaultClean never sees which sites you visit.
Open Settings on your iPhone, tap your name, then Subscriptions, and choose VaultClean. Deleting the app doesn’t cancel the subscription.
If Face ID is turned on, you can still open it with Face ID. We can’t reset a PIN or recover what’s behind it, because everything is stored only on your iPhone.
More answers are on the Support page.
The new VaultClean is coming soon to the App Store.
Download VaultClean and see where you stand. The check is free.
For iPhone.