Encrypted on your iPhoneNo accountFree to start
Some photos shouldn't be one swipe away.
Bunker keeps them in a vault only your Pattern can open. For iPhone, iPad and Mac. No account, and we can't see inside.
Draw through the dots to try it, or .Opened. In Bunker, only your own Pattern does that.
Encrypted before it's saved
AES-256, on your device, with a key made from your Pattern.
No account to break into
No email, no password, no server holding your keys.
A backup that stays sealed
Free iCloud backup, encrypted before it leaves your phone.
How it works
Three steps. Then it just works.
- 1
Draw your Pattern
Draw any line through the 25 dots. That Pattern becomes the key to the vault, made on your phone. We never see it.
- 2
Add your photos
From Photos, Files, the camera or the scanner. Afterwards Bunker offers to delete the originals, so the only copy left is the locked one.
- 3
Keep your Recovery Phrase
A short sentence that opens the vault if you ever forget your Pattern. Write it on paper and keep it away from your phone.
Hidden Vaults
A wrong Pattern opens nothing at all.
Each vault has its own Pattern. A Pattern that opens nothing looks exactly like a mistake, so Bunker never gives away what's there, or how much.
With Pro you can add a Duress Vault. It opens like any other, and quietly removes your other vaults from this phone. Your encrypted iCloud backups keep them.
One honest catch: on the Free plan, Bunker keeps a count on the device so it can apply the free limits, so someone examining the phone could count your vaults. Pro deletes that count.
Legacy Vaults
If you can't open it, two of them can.
Choose up to 5 people you trust, and print each of them a Legacy Card. Unless you pick just one person, no single card opens anything.
Together, the number of cards you chose opens a read-only copy of that one vault: the will, the insurance papers, the photos. Your other vaults are never included.
Any 2 of 3, for example. You choose the numbers.
In this version, enough of them together could open it at any time, so choose people you'd trust with it today. Being a trusted contact is free.
iPhone, iPad and Mac
Made for your Mac, not stretched to fit it.
On Mac, Bunker has a sidebar, a proper grid and keyboard shortcuts. Drag files in from Finder. Press ⌘L and it locks.
One purchase covers iPhone, iPad and Mac. With Pro, your vaults sync through your own iCloud, sealed before they leave each device.
Everything else
The rest of it, done carefully.
Encrypted Backup
Free, encrypted backup of each vault to your own iCloud, restored on a new device with its Pattern or Recovery Phrase.
ProVault Sharing
Send someone a read-only, encrypted copy of a vault or a selection, with a link, a QR code or a 24-word code. Receiving is free.
Secure Camera
Take photos and videos straight into a vault, so they never appear in Photos or iCloud Photos.
Scan & Search document scanner
Scan IDs, passports and papers into a vault as searchable PDFs, with text read on your device. Free for everyone.
Search inside your vault
Find anything in the open vault by name, note text, scanned text or text in photos, with an index that stays encrypted on your device.
ProAlternate App Icons
Swap Bunker's Home Screen icon for one of 7 everyday-looking designs. A disguise for casual glances, with honest limits.
Security
What we can't do, by design.
The strongest promise a privacy app can make is one it couldn't break if it tried. Here are ours.
And the limits: Bunker can't protect a phone that's already been hacked, or a Pattern someone watched you draw. Every limit is on the security page.
- We can't open your vaults. There's no account and no copy of your key anywhere but your device.
- We can't see what you keep. Photos, file names, thumbnails and notes are all encrypted. Analytics are off unless you turn them on, and never include what's in a vault.
- We can't reset your Pattern. Your Recovery Phrase can. That's why we ask you to write it down.
Pricing
Free to start. Backup included.
Free
$0
- 3 vaults, with 100 photos, 10 videos and 20 documents or notes in total
- Encrypted iCloud backup
- Scanner with search, and the Secure Camera
- Open shares and Legacy Cards from other people
Pro
$19.99 a year
7-day free trial, about $1.67 a month. Or $1.99 a week, or $39.99 once.
- As many vaults and items as you like
- Sync across iPhone, iPad and Mac
- Duress Vault
- Share a vault, read-only
- Legacy Vaults, up to 5 trusted contacts each
- Alternate app icons
Family
$49.99 a year
Or $99.99 once. Pro for up to 6 people through Family Sharing.
- Everything in Pro, for each person
- Everyone's vaults stay their own
Bunker needs iOS 18, iPadOS 18 or macOS 15 or later. Prices in US dollars; the App Store shows your local price. Subscriptions renew automatically unless you cancel at least 24 hours before the period ends.
Compare
Comparing vault apps? We'll show where others win.
Bunker vs Apple's Hidden album
The Hidden album is free, built in and locked with Face ID or your passcode. Bunker adds a separate Pattern, multiple vaults, a Duress Vault and Legacy Vaults.
Bunker vs Keepsafe
Keepsafe is a long-running PIN photo locker with an account, its own cloud and an Android app. Bunker has no account, Pattern-based keys, Hidden Vaults and Legacy Vaults.
Bunker vs Vaultaire
Two pattern-locked vaults with no account. Bunker adds Legacy Vaults, a native Mac app and on-device text search; Vaultaire has a Monthly plan and supports iOS 17.
Questions people ask first
Can anyone at Bunker see my photos?
No. Everything is encrypted on your device with a key made from your Pattern, and there's no account or server holding that key. We couldn't open a vault if we were asked to.
What if I forget my Pattern?
Use the vault's Recovery Phrase, the sentence Bunker gives you when you make the vault. It opens the vault and lets you draw a new Pattern. Without the Pattern, a Passphrase you added or the Recovery Phrase, nobody can open it, including us.
Is the iCloud backup really free?
Yes, for everyone. Each vault is encrypted before it's backed up to your own iCloud, and you restore it on a new device with its Pattern or Recovery Phrase.
What happens to my vaults if I die?
With a Legacy Vault, the people you choose each get a printed Legacy Card. Together, the number of cards you picked opens a read-only copy of that one vault. In this version they could do that at any time, so choose people you'd trust with it today.
Does it work on Mac and iPad?
Yes. Bunker is a native app on iPhone, iPad and Mac, and one purchase covers all three. With Bunker Pro, your vaults sync between them through your own iCloud, encrypted end to end.
Your photos. Your key.
No account. No ads. Nothing to sign up for.
For iPhone and iPad with iOS 18 or later, and Mac with macOS 15 or later.