CroBox

CroBox keeps private files on your device and nowhere else: passport and ID scans, contracts, tax papers, recovery codes, personal photos and videos — the things you would rather not leave in a cloud drive.

There is no account, no server and nothing to sign in to. Your files are opened by a password only you know. CroBox cannot read them, and cannot recover them either.

PLEASE READ THIS FIRST
• Forget your password and your files are gone. There is no reset, no recovery email and no back door — not for you, and not for us.
• Delete CroBox and everything inside it goes with it. Removing the app erases its storage — CroBox keeps no copy anywhere else.
• CroBox is not a backup. It is somewhere to keep private files while you need them — not the only place an important file exists. Anything you cannot afford to lose should live somewhere else as well.

PRIVACY — ENCRYPTION IS YOUR CHOICE
CroBox keeps files in spaces, and each space is created with its own answer about encryption.
• Switch File Encryption on as you create the space and every file is sealed with AES-256-GCM under its own random key. Those keys are wrapped by a master key that only your password unwraps.
• Leave it off and files are stored as they arrived: still inside CroBox's sandbox, still behind the space's password, but readable to anyone who reaches the storage itself. Imports are faster.
• The answer is given once, when the space is made, and cannot be changed later. CroBox does not encrypt or decrypt a library after the fact — so if you want encryption, turn it on at the start.
• Your password is 6 to 16 digits, stretched with PBKDF2 and combined with a device secret held in the Keychain before it ever becomes a key.

SECURITY — A SPACE THAT ISN'T THERE
• Add as many spaces as you like. Each has its own password, its own files, its own tags and its own encryption setting.
• Every space after the first is listed nowhere. Nothing in CroBox hints that it exists; typing its password on the lock screen is the only way in.
• Auto-Delete: a hidden space can be set to destroy itself once enough wrong passwords have piled up anywhere in CroBox. You choose the number — ten at the least — and when it is reached, that space's files, thumbnails and key are erased at once, without a prompt.
• Guessing is slowed long before that. Wrong passwords close the keypad for a minute, then five, then ten, then half an hour, then a day.
• Locking drops the key, closes the library and deletes every file that had been decrypted for viewing.
• Auto-lock after a delay you choose, or lock instantly from Settings.
• Optional Face ID / Touch ID for your first space. Your password always works.
• Hide file previews in the App Switcher.

PRIVATE BY DESIGN
• No sign-up, no login, no cloud, no servers.
• Works fully offline. Nothing is ever uploaded.
• No analytics, no trackers, no advertising.
• Built entirely on the frameworks that ship with iOS — SwiftUI, SwiftData, CryptoKit, Quick Look and Local Authentication. No third-party code.

EVERYTHING IN ITS PLACE
• PDF, Word, Excel, PowerPoint, text and Markdown.
• Photos and videos in a Media tab of their own, with a full-screen viewer and video player.
• Audio, ZIP archives and anything else iOS can hold.
• Tags instead of folders — a file can carry as many as you like.
• Notes on any file; search by name, tag, note or extension.
• Quick categories: Recently Added, Recently Opened, Untagged, Large Files.
• Import from Files or Photos, or save from any app through the Share Sheet.
• Duplicates are spotted by SHA-256 hash before anything is written.
• Deleted files wait 30 days in Recently Deleted (adjustable) before they go for good.

Local. Private. Yours alone. Keep your password safe — and keep a copy of anything irreplaceable somewhere else.