Voynich

macOS · iOS · iPadOS

Two safes, one key.

Voynich encrypts your files and folders in place with AES-256-GCM, and keeps your passwords in an encrypted file you place wherever you want. Both open with the same Touch ID / Face ID prompt. Nothing is uploaded — there is no account and no server.

Download on the Mac App Store Download on the App Store Coming soon

One purchase for Mac, iPhone and iPad — $14.99, paid once. No subscription, no in-app purchases.

Features

What the app actually does

Encrypts in place

The file is replaced by its encrypted container at the same name and path — no visible plaintext copy left beside it. Folders are processed recursively, up to six files at a time. An encrypted file is recognised by its FENC content signature, not its extension, so renaming one never confuses the app.

Your data is never locked inside the app

The cipher is standard AES-256-GCM and the container format is documented, so your files and password vaults can be decrypted on any computer with your recovery key. A standalone Python script and an offline browser page ship with the project — a safety net, not just a convenience.

Decrypt without the app — the recovery guide

Passwords as a file you place

Each vault is a single encrypted document, and you choose where it lives: the default location, a folder of your own, a USB drive, your own cloud. It stays protected anywhere, and opening it needs the master key. Masked password fields, multi-line text fields, several vaults, search and auto-save.

A watched folder encrypts itself

Mark a folder and every new file dropped into it is encrypted in the background — on Mac in real time, on iPhone and iPad when the app opens — after a short delay that confirms the write finished.

The key never leaves the device

A random 256-bit key is generated on the device and stored in the biometric-protected Keychain, marked this-device-only and never synced to iCloud. Reading it requires Touch ID / Face ID, or the device passcode where biometrics are unavailable.

Two ways back in

A one-time recovery key restores access on another device and decrypts in the external tools. Or export a recovery file, wrapped with a passphrase through PBKDF2-HMAC-SHA256 at 600,000 iterations — recovery then needs both the file and the passphrase.

Product showcase

The app on Mac and iPhone

Mac — files, vaults, recovery
iPhone — the same vault

Screenshots

The main screens

The file list, each item showing a locked, unlocked or partially locked badge A password vault with masked password fields and multi-line text fields The How Security Works screen, explaining where the master key lives Recovery setup, showing the one-time recovery key and the recovery file The Document Location screen, where the encrypted vault file is placed

Getting started

Four steps to a locked folder

  1. Unlock the app

    Touch ID or Face ID unlocks the vault on first launch, and the app generates your 256-bit key into the Keychain. Where biometrics are unavailable, the same prompt falls back to the device passcode.

  2. Add a file or a folder

    Pick items from the file picker. They stay in the list across relaunches through security-scoped bookmarks, and each row shows whether it is locked, unlocked or partially locked.

  3. Encrypt — or let a folder encrypt itself

    Encrypt replaces each item in place. Mark a folder as watched and anything new dropped into it is encrypted on its own in the background, without opening the app on Mac.

  4. Save your recovery key

    The one-time recovery key is shown once, under Recovery. Keep it somewhere safe: it restores access on a new device, and it decrypts your files and vaults on any computer through the Python script or the offline browser page — even without Voynich.

Support

Questions, feedback, or help getting set up

Email reaches the developer directly.

support@bdtech.app