Protection
Locking and protection
Encryption protects your files when the vault is locked. These features make sure it's locked when it matters, and that guessing your way in is hopeless.
Auto-lock
Sealed locks when you leave the app: immediately, or after 1 or 5 minutes if you prefer. When it locks, your keys are cleared from memory and any temporary copies made for viewing are deleted. Choose this in Settings → Auto-lock.
Its own passphrase
Your vault doesn't open with your iPhone passcode. Someone who knows your passcode, or watched you type it, still can't get into Sealed.
Face ID and Touch ID
Turn on Unlock with Face ID (or Touch ID) in Settings for quicker unlocking. Your passphrase always works too. Sealed keeps a separate key for this in the Keychain that iOS only releases after a successful face or fingerprint check, and not your passcode. If someone adds a face or fingerprint to your phone, that key stops working and Sealed asks for your passphrase.
Face ID is quicker, but anyone who can hold your phone up to your face can open the vault. A passphrase is often better protected than your face. The choice is yours, and it's off until you turn it on.
Slowing down guessing
You get 5 tries. After that, each wrong passphrase or recovery key means a longer wait: 30 seconds, 1 minute, 5 minutes, 15 minutes, then an hour for each try after that. The count is kept in the Keychain, so closing or reinstalling the app doesn't reset it, and changing the phone's clock doesn't skip the wait.
Hidden in the app switcher
When you swipe between apps, Sealed shows its logo instead of your files.
Erase everything
Tap Erase all on the vault screen and type ERASE. Sealed destroys the keys first, so nothing can be opened from that moment on, even if the phone is switched off halfway. Then it deletes every file. Not even your recovery key can bring them back.