Privacy & Local Storage
Understand how your data stays on your device and what that means for your security.
Local-first by default
VeraLocker is designed around local storage. The information you add to your vault stays on your device by default and is not uploaded to VeraLocker servers.
What protects your vault
Two layers protect your vault. First, VeraLocker encrypts everything on the device with a key derived from your vault passphrase, and locks itself automatically when you step away. Second, device security settings add a layer underneath. Use a strong vault passphrase, enable Face ID or biometric unlock for the app, keep your operating system updated, and avoid sharing unlocked device access.
When data leaves your device
Data leaves your device only when you choose an action that requires it: exporting a file, sending an encrypted share, using AI features with your explicit consent, or approving a desktop session. Vault records and attachments are encrypted before storage, share packages are end-to-end encrypted for their recipient and expire automatically, and AI features intentionally exclude sensitive information such as passwords.
Desktop access stays under your control
With Pro, you can approve a desktop browser to read and edit your vault through an end-to-end encrypted connection. The relay cannot read the messages, and your vault key stays on your phone. Keep VeraLocker open and unlocked while you work. End the session on either device when you finish; locking your phone also ends it automatically.