About snapWONDERS & Vaultify
Two privacy-first tools. One mission — expose what's hidden inside digital media, and protect what you choose to hide. Built by snapWONDERS — a goldenSoftwareENGINEERS® company.
snapWONDERS
snapWONDERS forensically exposes what's hidden inside photos and videos. Every image and video file carries invisible metadata embedded by the camera or app that created it — GPS coordinates, device serial numbers, creation timestamps, encoder signatures, and more. When you share those files, you share that metadata with everyone who receives them.
The analysis engine runs 60+ automated forensic checks: Error Level Analysis (ELA) for tampering evidence, noise inconsistency detection, P-frame bitrate forensics for video, device fingerprint identification, EXIF data extraction, and dozens more. The results are presented without requiring an account, without storing your files, and without logging what you submit.
Visit snapWONDERS homepageVaultify
Vaultify lets you hide and conceal files inside any regular photo or video — locking your content safely so only you can retrieve it. Upload the files you want to hide, choose a cover photo or video, and Vaultify conceals them using AES-256-GCM encryption. When you're ready, use the Reveal flow to unlock and extract your hidden files.
Beyond hide and reveal, Vaultify provides a REST API and MCP server for privacy-critical media operations — analyse, convert, and scrub digital files without trusting a third-party cloud service with your data.
Security & Encryption
Every Vaultify hide job requires a password — there is no option to embed content without one. Your password never leaves your device in a usable form; only the cryptographic result of processing it is used during embedding.
AES-256-GCM encryption
All hidden content is encrypted with AES-256-GCM before it is hidden inside the photo or video. AES-256 is the cipher specified by the NSA for TOP SECRET classified information and is widely adopted by militaries and intelligence agencies around the world. The GCM mode also provides authentication — decryption fails with a clear error rather than silently returning corrupt data.
Argon2id key derivation
Your password is never used directly as an encryption key. It is first processed through Argon2id — the winner of the international Password Hashing Competition — which is deliberately memory-hard and computationally expensive. This makes brute-force attacks (trying millions of passwords per second using GPUs or specialised hardware) impractical even against a powerful attacker who has obtained the photo or video.
Image-bound key
The encryption key is uniquely tied to your specific photo or video. A copy of the same photo from a different source — even one that looks identical — will not produce the same key. Always use the original, unedited file when revealing your content.
Vault Lock (Pro)
Pro accounts can enable Vault Lock, which adds a server-held secret to the key derivation. The final encryption key requires both your password and a token held on our servers — neither alone is sufficient to decrypt anything. We never hold your password, so we cannot access your content regardless. Vault Lock goes a step further: if you revoke a vault profile, its token is permanently deleted from our servers, making the content irrecoverable by anyone — even if the password is subsequently leaked or guessed.
What we do not do
- We do not store your password or any form of it on our servers.
- We do not retain your uploaded files after your session ends.
- We do not have a "master key" or back door — we cannot decrypt your content on your behalf.
- We do not log the content of hide, reveal, or analysis operations.
Why we build
Vaultify was born from a vision Huey had — that digital media could carry personal stories, accessible to those they were meant for and invisible to everyone else. After his passing, that idea became the foundation of what we built. Accessibility and privacy aren't features we added; they're the reason these tools exist.
Every photograph, document, and video you create also carries invisible metadata: GPS coordinates, device serial numbers, and creation timestamps embedded by default by virtually every camera and app. When you share those files, you share that metadata. We built snapWONDERS to expose what people don't know is there, and Vaultify to give people control over what they choose to share.
Read our full storygoldenSoftwareENGINEERS®
snapWONDERS and Vaultify are products built by goldenSoftwareENGINEERS® — a software house founded by Kenneth Springer and focused on privacy-respecting tools for digital media. Questions, feedback, and bug reports are welcome via the contact form.
ABN: 72 080 510 827
