Obscura Photo Vault vs Secret Album: Photo Vault

Obscura Photo Vault stores photos and videos in encrypted vaults on iOS. It uses AES-256-GCM and derives vault keys with 600,000 rounds of PBKDF2-HMAC-SHA256. The maker says the app functions without network access, has no server or account system, and gathers no installation, usage, or analytics data. It provides ten encrypted vault slots, Face ID and Touch ID unlocking, configurable auto-lock, delays after failed attempts, and memory clearing when a vault locks. Photo tools include editing, collages, tags, favorites, manual arrangement, duplicate detection, and Live Photo frame extraction. Users can import from their camera roll and export a vault as a password-protected encrypted.obscura file. Vault data is included in iCloud Backup by default and remains encrypted there. The maker says the indistinguishability property for hidden vaults applies only within stated threat-model bounds. The free plan allows up to 50 photos in one vault. Pro Monthly is $6.99 a month; Pro Yearly is $29.99 a year after a 7-day free trial; Pro Lifetime is $39.99, paid once payment. Forgotten passwords cannot be recovered.

Secret Album: Photo Vault hides photos and videos in encrypted storage protected by a PIN or fingerprint. A decoy PIN can conceal the real contents, and individual albums can use unique PIN codes. The app offers break-in alerts and reports with intruders' photos. Deleted photos and videos can be recovered from the Trash folder. A private camera and cloud backup are also listed. The app is available for iOS and macOS, subject to device requirements: iOS 15.0 or later and iPadOS 15.0 or later, or a Mac with macOS 12.0 or later and an Apple M1 chip or later. The App Store listing gives it an 18+ age rating. A free plan and free trial are listed, along with in-app purchases. Premium purchase options include USD 19.99, USD 49.99, USD 6.99, and USD 1.99, among other options. BP Mobile says it does not sell personal data and encrypts personal data where possible before sending it to hosting providers. It also says it cannot guarantee absolute security.