Here to help.

Contact

Email NorseHorse@norsehor.se with the word VaultPony in the subject. Include what you did, what you expected, and what happened instead. Never include a vault password, keyfile, or vault contents in a support request — they are not needed to help you, and you should treat them as secrets everywhere.

For security vulnerabilities, use the subject SECURITY and see the security page for the disclosure process.

Bug reports

The issue trackers are public, and a report there helps everyone who hits the same thing:

• VaultPony for iOS — the iPhone and iPad app.
• VaultPony for Android — the Android app.
• VaultPonyCore — the shared Rust core, for anything about the container format, unlocking, or filesystem behavior on both platforms.

Frequently asked questions

I forgot my vault password. Can it be recovered?

No. There is no account, no server, and no backdoor, so there is nothing to reset. The password (plus any keyfiles and PIM) is the only way in. If you exported a header backup while you still knew the password, that backup accepts the password that was current when it was made, which helps after a password change gone wrong but never recovers a forgotten one.

My vault will not unlock. What should I check?

First the obvious: exact password, keyboard layout, and any keyfiles or a custom PIM the vault was created with. If those are right and it still refuses, the header may be damaged. Use Recovery to restore the container's embedded backup header or a header backup file you exported earlier; both verify your password before writing anything.

Can I open the same vault on my computer?

Yes. Vaults are ordinary VeraCrypt-format container files. Move or sync the file to a desktop and open it with compatible desktop software, then bring it back. Nothing about the file is specific to the app.

Where are my vaults stored?

Wherever you put them. A vault is a single file you keep on your device or in a storage provider of your choosing. The app never copies it anywhere on its own, has no cloud of its own, and never sees your files outside the vaults you open.

Does VaultPony collect any data?

No. There is no account, no telemetry, and no tracking. The Android app declares no internet permission at all. See the privacy policy for the full statement.

How do hidden volumes work?

A hidden volume is a second vault concealed inside the free space of the first. Each has its own password, and the password you type picks which one opens. The outer volume gives no sign the hidden one exists, and outer unlocks can be write-protected so normal use cannot overwrite the hidden data.

One honest warning

Encryption without recovery is the product, not a flaw in it. Keep your password somewhere safe, consider a header backup for vaults that matter, and keep a second copy of important vault files like you would any important file. Nobody — including the developer — can open a vault without its password.

VeraCrypt is a registered trademark of IDRIX. VaultPony is an independent project, not affiliated with or endorsed by IDRIX. The container format is implemented clean-room from published format documentation; no VeraCrypt or TrueCrypt source is used or linked.