How a pattern becomes a key
When you draw on the 3×3 grid, Veilbox reads the exact sequence of dots you touched. That sequence goes through a key-derivation function (a deliberately slow algorithm designed to make guessing expensive) together with a random salt that lives on your device. The output is a 256-bit key used to unlock your vault.
Nothing about the pattern is written to disk. There is no hash to steal and no "correct answer" sitting in a database waiting to be compared. If someone copies the app's data off your phone, they get ciphertext and a salt, nothing more.
Why this matters more than it sounds
A lot of photo-locker apps put a lock screen in front of files that are stored normally. Bypass the screen (with a backup extraction tool, a jailbreak, or a bug) and the photos are right there. With Veilbox there's nothing behind the screen to reach: without the key, the files are unreadable noise.
- No stored secret. Your pattern is never saved, hashed, or uploaded.
- Slow by design. Each guess costs real compute time, so brute-forcing every pattern is impractical.
- Longer is stronger. Patterns can use all nine dots and revisit directions, and every extra dot multiplies the number of possibilities.
Picking a good pattern
Avoid the shapes everyone draws: letters, a simple L, a Z, or a full square. Start from a dot other than the top-left corner, change direction at least twice, and use six or more dots. If you want even more strength, add a Recovery Phrase as a second factor.
Because the pattern is the key, nobody can reset it for you, including us. Set up a recovery phrase when you create the vault.
Questions about Pattern Key
Can Veilbox support reset my pattern?
No. We never have your pattern or anything derived from it, so there's nothing on our side to reset. A recovery phrase is the only backup route.
How many dots does a pattern need?
The minimum is four, but we recommend six or more with at least two changes of direction.
Is a pattern weaker than a passcode?
A short pattern is weaker than a long passcode. A long, irregular pattern combined with a slow key-derivation function holds up well, and you can add a recovery phrase for extra strength.
Try Veilbox free
Encrypted on your iPhone. No account required.