Crop, adjust, blur, redact and annotate private photos on iPhone and Android. Edit inside your encrypted vault without sending images to an editing service.
Saves a still PNG. HDR becomes standard range; animated photos use their first frame.
‹BlurConfirm
Blur strength
Brush size
Save
Encrypted on your device
Illustrative preview. Screens vary by platform.
A personal photo, document scan or screenshot often needs a small change before it is useful. Revault lets you make those changes where the file is already protected: in a dedicated editor inside your unlocked vault. Select a tool to preview its changes, confirm them with the checkmark, or use the tool’s Cancel button to discard that operation. Save the encrypted replacement only when the result is right.
In the next iOS and Android update, photo and video editors use Save and offer Save, Discard edits or Keep editing when you leave with unsaved changes. Photo blur controls show Blur strength and Brush size. While typing, the keyboard covers the controls without shrinking the photo preview. Drag text directly to move it, rotate it with two fingers, or use its right-side remove button. Confirm keeps the current operation; Cancel restores its starting state. Save in the leave prompt confirms the visible operation before saving.
Frame and adjust the image
Use free crop or common ratios, rotate, straighten and flip either axis. Adjust exposure, brightness, contrast, saturation, warmth, shadows, highlights and sharpness, or choose a simple colour filter. Preview changes without overwriting the stored file.
Blur, redact, draw and label
Paint blur strokes directly on the photo with adjustable brush size and strength. Use opaque black redaction for details you need to conceal; blur is a visual effect and is not reliable anonymization. Tap the photo to type in place, then drag the text directly to position your label, rotate it with two fingers or remove it with its right-side button.
Undo while you work
Tool controls replace the operation strip to leave more room for the photo. Use Confirm on the right of the tool header to apply the preview, or the tool’s Cancel button to discard only that operation. Each confirmed operation becomes one undo step. Compare with the original and save only confirmed edits.
Save one encrypted replacement
Save renders a PNG without the source’s embedded metadata and encrypts it before replacing this item. Folder, tags and favourite status stay with the file. A failed render or commit leaves the stored item unchanged. Editing does not require an additional file slot.
How it works
Unlock the vault and download the photo to this device if needed.
Choose Edit photo from the file actions or private preview.
Select a tool, adjust its preview, then choose Confirm to apply it or the tool’s Cancel button to discard it.
Review small details and save the encrypted replacement when you are satisfied.
Edit a private photo without an export-and-reimport workflow
In the next iOS and Android update, photo and video editors use Save and offer Save, Discard edits or Keep editing when you leave with unsaved changes. Photo blur controls show Blur strength and Brush size. While typing, the keyboard covers the controls without shrinking the photo preview. Drag text directly to move it, rotate it with two fingers, or use its right-side remove button. Confirm keeps the current operation; Cancel restores its starting state. Save in the leave prompt confirms the visible operation before saving.
Moving a personal image into a general editor creates another place where decrypted pixels may be retained. Revault keeps its working copy in private temporary storage and processes the image locally. Open the editor from a photo’s file actions or private preview. On Android, the editing screen opens immediately and the photo fades in once prepared, with controls disabled until then. Selecting a tool replaces the operation strip with its controls. Changes remain a live preview until you use Confirm on the right of that tool’s header. The tool’s Cancel button discards the current operation and restores the strip, keeping previously confirmed edits. Each confirmed operation is one undo step. Compare helps you judge the original against your changes.
Choose blur or solid redaction according to the task
The blur brush softens the areas you paint, with separate size and strength controls. It can reduce distracting detail or create a visual effect, but recognizable shapes and contextual information may remain. Do not rely on blur to conceal a password, identity number or other secret. Use Redact for sensitive details and cover the entire area with an opaque block. Redactions are flattened into the saved pixels, rather than kept as a removable layer. Neither tool examines the image for you: inspect the whole frame for reflections, repeated information and details you did not cover.
A useful workflow for a screenshot is to crop unrelated content first, cover any sensitive text with Redact, then add a short label explaining the remaining information. For a personal photo, blur a distracting area, adjust warmth or exposure gently and compare against the original. Each mark stays attached to its image coordinates when you rotate, mirror or crop afterward.
Make framing and colour changes without losing track of the original
Free crop and common aspect ratios help fit a scan or photograph to its intended use. Rotate and straighten a page before making small brightness, contrast or shadow adjustments. Check faint print and signatures instead of maximizing contrast indiscriminately. To add text, tap the photo and type directly in place, then drag it directly to position it, rotate it with two fingers or use its right-side remove button. Tap a label to edit it again. Confirm that text operation when its wording, size, colour and position are right. Drawings and text labels become visible pixels in the saved image; they are not editable document fields or OCR. Reset and the undo history apply before saving. Keep an independent original if authenticity, exact appearance or later re-editing matters.
Understand what Save commits
Saving renders the remaining full-resolution image to PNG without the source’s embedded metadata, encrypts it and replaces the selected item only after a successful commit. Folder placement, tags and favourite status stay with it. PNG output may use more storage than the source. Optional sync distributes the saved encrypted replacement according to this vault’s settings, while previous backups and shares retain their earlier contents. Closing or locking the editor releases previews and removes decrypted working files; saving does not create a permanent editing project or an undoable original.
Practical checklist
Download the photo before editing and keep a separate original if you may need it later.
Use solid Redact for sensitive information; blur is not reliable anonymization.
Inspect the full frame and small details before saving the encrypted replacement.
Frequently asked questions
Does Revault upload photos while I edit them?
No. The editor renders previews and the saved image on this device. Optional vault sync can transfer the encrypted replacement after saving; it does not send a decrypted image to an editing service.
Does blurring a face or document number make it anonymous?
No guarantee is made. Blur can leave identifying structure or context visible. Use opaque redaction to cover a sensitive region completely, and check the rest of the image before sending it to someone.
Can I recover the original pixels after saving a photo edit?
The editor’s undo history lasts only for the editing session before committing. Saving replaces that vault item. Recover an earlier version from a separately retained original or encrypted backup if you need it.
Which photos may the native editor reject?
On iOS, camera HEIC, HDR and higher-bit-depth photos can be edited when the system can decode them. Saving creates a standard-range still PNG: HDR is tone-mapped, auxiliary depth and motion data are omitted, and animated images use their first frame. Android can still reject animated, HDR and unsupported inputs. A failed edit leaves the stored source unchanged.