Encrypted backup

Premium

Back up the vault to storage you already have: Dropbox, a Nextcloud or WebDAV server, or anywhere the iPhone share sheet reaches, like Files or iCloud Drive. The files leave your phone already encrypted, Mavaul never hosts them, and only your recovery key opens them.

How it works

Open Settings, then Backups, and choose Dropbox, WebDAV (Nextcloud and others) or Files.
Mavaul packs the vault as it already is on the phone: the encrypted photos, videos and details. Nothing is decrypted for the backup.
It adds a manifest with a SHA-256 fingerprint of every file, signed with a key derived from your recovery key, so a changed or missing file is caught on restore.
On a new iPhone, pick Restore, choose the backup, type your recovery key and set a new passcode.

The details

Spec	Encrypted backup
Destinations	Dropbox, WebDAV (Nextcloud and others), or the share sheet: Files, iCloud Drive, AirDrop
Encryption	AES-256-GCM, done on the phone before upload
Integrity	SHA-256 per file, manifest signed with HMAC-SHA256
Opens with	Your 24-character recovery key
Hosted by Mavaul	Never
When	Whenever you run it
Plan	Premium

Good to know

The recovery key alone opens a backup. Keep it as safe as the backup itself.
Restore goes into an empty vault. If the phone already has photos in Mavaul, delete the app data first.
A WebDAV server on plain http sends your login unencrypted. Mavaul warns you, and https is better.

Questions

Where are Mavaul backups stored?

Wherever you choose: your Dropbox, your Nextcloud or WebDAV server, or Files and iCloud Drive through the share sheet. Mavaul doesn't host backups.

Can Dropbox or Nextcloud see my photos?

No. They only receive files that were encrypted on your iPhone.

How do I restore on a new iPhone?

Install Mavaul, choose Restore, pick the backup and type your recovery key. Then set a passcode for the new phone.