Status

Twokeep is not available yet. These pages describe the iPhone app as it is being tested, and details can change before launch.

Can Twokeep see my photos and videos?

No. They are encrypted on your iPhones before upload, and Twokeep has no key that opens them. Read Security for what the service can still see, such as when requests and approvals happen.

Can one of us open items alone?

No. Pairing is not permission. An item opens only with the other person's approval, under a permanent share you both confirmed, or when you watch it together.

Can my partner keep a copy?

A modified app or a compromised phone can keep copies. During an approved viewing the viewer's iPhone puts the full key together, and a modified app could keep that key or what is on screen. Later expiry or removal cannot take it back. The person who added an item may still have their original, outside the vault.

Are screenshots blocked?

On iOS a screenshot cannot be prevented. Twokeep learns about it after it is taken, tells both of you and ends the viewing. Screen recording or mirroring hides the item.

After a screenshot the item stays locked for that viewer. It opens for them again only with a fresh approval, when the other person re-confirms a permanent share, or when you watch it together. A camera pointed at the screen is outside every control.

Does “Playback started” mean my partner watched?

It means your partner's app reported that playback began. It is a report from their app, not proof of viewing.

What does Remove for both do?

Either of you can remove an item for both, without asking the other. Access ends at once. Twokeep removes it from its servers, and encrypted backups expire later. Your partner's iPhone erases its copies the next time Twokeep runs. It cannot reach anything outside the vault: the original in the photo library of the person who added it, screenshots, or a key a modified app kept.

If I stop a permanent share, is it gone from my partner's iPhone?

Twokeep stops every viewing under it and your partner's app erases the key. An offline iPhone keeps the key until it next goes online. A copy kept by a modified app cannot be recalled.

Is watching together synchronised?

No. Playback starts on both iPhones once you have both joined, but it is not synchronised: pausing on one iPhone does not pause the other. See Watching together.

What if I lose my iPhone?

Besides the copy saved for iCloud Keychain, your recovery phrase is the only backup of your recovery key. With either one, a new iPhone can get your keys back once your partner approves it after comparing a fresh safety code with you. Without either, and without your old iPhone, your half of each key is gone and the shared items can no longer be opened by either of you, except those your partner holds under a permanent share. Read Your recovery phrase.

Can support unlock a vault or recover my keys?

No. Twokeep cannot recover your keys, unlock a vault, or approve a viewing for anyone. If your partner does not approve a new iPhone, support cannot do it instead.

Has the design been reviewed?

No external cryptographic review has been done; the external review was waived (ADR 0005 in the protocol repository). An internal adversarial review was completed in October 2026 and its report is kept in the protocol repository; it was not independent. Security has the details.

More help