Age Vault

ENCRYPT WITHOUT TRUSTING ANYONE.

Age Vault is a modern, on-device encryption app for iOS. It implements the open age specification — the same cryptography used by security professionals as a simpler, more auditable alternative to PGP. No servers. No accounts. No analytics. Your private key is generated on your iPhone and never leaves it.

— WHAT YOU CAN DO —

• Generate an X25519 keypair, locked behind Face ID
• Encrypt text messages to anyone whose public key you have
• Decrypt messages sent to you with a tap
• Save recipient public keys as named contacts
• Encrypt files — photos, documents, archives, anything
• Send the same encrypted payload to multiple recipients at once
• Export and back up your keypair through the iOS Share Sheet

— HOW IT WORKS —

Age Vault uses the open age encryption format:
• X25519 elliptic-curve key exchange
• ChaCha20-Poly1305 authenticated stream encryption
• HKDF-SHA256 key derivation

Encrypted output is the standard age format, interoperable with the reference age CLI on macOS, Linux, and Windows. You are not locked into our app.

— PRIVACY POSTURE —

• Zero data collection. No analytics SDKs, no crash reporting off-device, no advertising IDs.
• No backend. The app has no server it talks to.
• Keys live in the iOS Keychain. We have no copy and no recovery — by design.
• Face ID authentication is handled by Apple's LocalAuthentication framework. Your biometric data never enters our code.
• In-app purchase is processed by Apple's StoreKit. We see only a confirmation that a valid purchase exists.

Full privacy policy: https://dolucid.com/age-vault/privacy.html

— FREE vs. PREMIUM —

The free tier is fully usable for encrypted messaging:
• Generate keypair
• Encrypt and decrypt text messages
• View your public key

A one-time $2.99 unlock adds:
• File encryption (any file type)
• Contacts vault — save recipient keys with names
• Multi-recipient encryption — encrypt once, share with many

No subscription. No recurring billing. One purchase, yours forever, restorable on any device signed into your Apple ID.

— WHY AGE? —

PGP is powerful but notoriously difficult — long key IDs, web-of-trust ceremony, dozens of legacy options that hide footguns. Age was designed by security researchers as a modern replacement: small key format, no configuration, no algorithm choices to get wrong.

— OPEN SPECIFICATION —

The age format is published, peer-reviewed, and implemented in multiple languages. Anything Age Vault encrypts can be decrypted by the reference age tool on a desktop. You own your data and your encryption keys, in a portable format.