Break-In Detection: How a Vault App Catches Someone Trying to Get In

What break-in detection actually is

Break-in detection is a vault app feature that quietly takes a photo of anyone who enters the wrong PIN trying to open your vault. There's nothing to configure beyond turning it on. It runs in the background and only ever activates the moment someone gets your PIN wrong.

Think of it less as surveillance and more as a tripwire for your own privacy. It doesn't watch what anyone does — it just tells you when someone tried the door and couldn't get through. Below: how that works, how it differs from your iPhone's own lock screen, and the everyday situations where it earns its keep.

How it actually works

A wrong PIN entered on the vault — not the phone's lock screen — silently fires the front camera. The photo and a timestamp get logged inside the vault, encrypted along with everything else it holds. Nothing uploads anywhere by default; the record stays on the device, for you.

This borrows a page from iOS itself. Apple's Secure Enclave enforces escalating delays after failed passcode attempts — none for the first two tries, then progressively longer waits, up to eight hours by the eighth. Those delays run on a coprocessor isolated from the rest of the phone, which is why they can't be shortcut by restarting the device.

The Secure Enclave's job is protecting the whole phone from a stranger who found or stole it. Break-in detection protects one vault from someone who's holding the unlocked phone and trying PINs on a single app — the same escalating-friction idea, one layer up. It's closer in spirit to Stolen Device Protection, which requires biometric confirmation before anything sensitive can change, even when the passcode is known.

Why it matters for your privacy

The realistic scenario here almost never involves a stranger. It's someone who's holding the phone, unlocked — a roommate scrolling through it, a curious kid, a technician handing your phone back after a repair. None of them need to break into the device; it's open already. What stands between that and your private photos, videos, documents, or contacts is whatever's guarding the vault specifically.

That gap is real. Physical access to an unlocked phone exposes messages, photos, call history, browsing data, and even deleted files still sitting in memory. A vault's own PIN gate — and the record it keeps of anyone who fails it — is what fills that gap. Same instinct behind Apple's own Stolen Device Protection, which treats "someone's holding the device" as its own threat model worth extra friction.

Framed the right way, this is about you knowing when someone tried, not about watching what anyone else does on their own device or account. For the OS-level version of the same question, see how to tell if someone's been in your phone. One limit worth naming: a wrong-PIN photo only catches attempts against the vault. It won't tell you about a phone that's unlocked and being casually looked through outside any app.

Frequently Asked Questions

What happens to the photo a vault app takes of an intruder?

It's saved locally, inside the vault, behind the same encryption as everything else it protects. Privara doesn't upload it anywhere by default — it's evidence for you, not a report sent to anyone else.

Does break-in detection work if my phone is locked at the OS level?

No. It only triggers once someone's past the phone's own lock and is now trying to get through the vault app's PIN. Think of it as a second, narrower layer on top of — not instead of — your iPhone's passcode and Face ID.

How is this different from my iPhone's own passcode lockout?

Scope, mainly. The Secure Enclave's escalating delays guard the entire device against a stranger who found or stole it. Break-in detection is narrower by design — it watches one vault, for someone who's already got the phone in hand.

Can I turn break-in detection off?

Yes — it's a setting inside the app, not a forced default. Most people leave it on; it costs nothing to run and only activates on a wrong PIN.

Is it okay to use this on a phone other people also use?

It's about protecting your own private content from being opened without permission, not about monitoring what someone else does on their own device. If you share a phone, it simply tells you when someone tried your vault and got the PIN wrong.

How Privara handles this

Privara's break-in detection works exactly like this: a wrong PIN silently captures a photo, saved to an intruder log inside the encrypted vault — no account, no upload, nothing leaving your device. It's one layer among several, and a big part of why Privara is the best way to keep this kind of content actually private, not just hidden from view.

The vault itself runs on AES-256 encryption at rest, so content stays unreadable even if someone got past the disguise entirely — a calculator that looks and works like a real one until you enter your PIN. And it's one vault for everything: photos, videos, documents, and contacts, all behind the same PIN, the same encryption, and the same break-in detection. No separate app needed for each type of content you'd rather keep private.

If keeping something private matters to you, that's reason enough. Get Privara on the App Store and set it up in a couple of minutes.