Notes App vs an Encrypted Vault for Sensitive Documents

Almost everyone does it. A quick note holding a passport number, the Wi-Fi password for the house, a photo of an insurance card, maybe a list of logins you keep meaning to move somewhere safer. The Notes app is always one tap away, it syncs across your devices, and you can even lock individual notes. For a lot of things, that is genuinely enough.

But "enough for a grocery list" and "enough for your identity" are different bars. When the note holds something that could be used to impersonate you or drain an account, it is worth understanding exactly what protects it, and where a purpose-built encrypted vault does more.

What the Notes app actually protects

Modern notes are protected in transit and at rest, and if you specifically lock a note, it is encrypted so it cannot be opened without your passcode, password, or biometrics. That is a real and useful protection. But two things are worth being clear-eyed about.

First, locking is opt-in and per-note. The protection only covers the notes you remember to lock, one at a time. The passport number you jotted down in a hurry, before you thought about privacy, is very likely sitting in an ordinary unlocked note. Second, the surrounding trust model is not the same as a vault whose entire design assumes the maker should never be able to read your data.

What a zero-knowledge vault does differently

An encrypted vault starts from a stricter promise: nothing is stored in a form the maker could open. A few properties set it apart from a notes app:

• Everything is encrypted, not just the items you flagged. There is no "unlocked by default" state. The whole vault is sealed.
• The key lives only on your device. It is generated on the phone and sealed in security hardware (the Secure Enclave on Apple, the Keystore on Android), so it cannot be lifted off even if storage is copied.
• Per-item keys. Each document gets its own key, so one slip does not expose the whole collection.
• No server, no reset. There is no company server holding your vault and no master password on the maker's side to reset, because the maker holds no key.

A locked note keeps casual eyes out. A zero-knowledge vault is built so the maker itself cannot look in.

Notes vs vault, side by side

Neither tool is "bad." They are built for different jobs. Roughly:

• Coverage. Notes protects only the notes you lock; a vault protects everything by default.
• Key custody. A vault puts the key in your hardware alone; a notes app operates inside the platform's broader account model.
• Organization. A vault built for documents adds recognition, categories, people tagging, and expiry reminders; notes leaves you to manage that by hand.
• Recovery for family. A vault can offer a passphrase and trusted-contact recovery so your family can reach what matters; a personal notes account was never designed for that handoff.

So when is Notes fine?

Plenty of the time. A shopping list, a draft message, directions to a party, a book recommendation. If leaking it would cost you nothing, the Notes app is the right amount of tool, and reaching for a vault would be overkill.

The line to watch is identity and money. A passport or Social Security number, account logins, financial details, a photo of an ID or a card. If a stranger seeing it could hurt you, that item belongs in an encrypted vault, not a note.

How Kinship Vault fits

Kinship Vault is a zero-knowledge vault for exactly this tier of information: documents, photos, passwords, and passkeys, all encrypted on your device with per-item keys sealed in your phone's secure hardware. There is no Kinship Vault server holding your data and no master password to reset. On-device recognition files scanned documents by type and date, and a recovery plan makes sure "only you can open it" never becomes "no one can." You can read the model in the security documentation.

Frequently asked questions

Is the Notes app encrypted?

Notes are protected in transit and at rest, and a note you specifically lock is encrypted so it cannot be opened without your passcode, password, or biometrics. An ordinary, unlocked note is not individually encrypted for you in that same way. Because locking is per-note, anything you do not lock is not covered by that extra layer.

Can Apple read my locked notes?

A locked note is encrypted, which is a meaningful protection. But the trust model differs from a zero-knowledge vault. In a zero-knowledge vault, the maker holds no key at all, runs no server that stores your data in openable form, and keeps no password to reset, so it cannot read your content even in principle. For the most sensitive documents, that stronger guarantee is the reason to use a dedicated encrypted vault.