Forgot your calculator vault password? What actually works

You typed the code, pressed =, and the calculator did what calculators do: it gave you a number. You try again. Same thing. Behind that keypad are your photos, and the code you were sure you’d never forget has gone.

What happens next depends almost entirely on which app you use and what you set up on day one. Some vault apps reset with an email, some with a security question, one with a number printed in its FAQ, one for a fee, and some not at all. Here’s how to work out which kind you have, and what to do (and not do) in the meantime.

First: don’t uninstall, and try the obvious

A forgotten code locks the files. Deleting the app to “start over” usually destroys them. Apple says plainly that deleting an app removes it and its data from your iPhone. On Android, files an app keeps in its own storage are removed when it’s uninstalled, and tapping Clear storage in the app’s settings does the same thing without the uninstall. So until you know how your app resets, leave it installed. There’s more on what survives deleting a vault app if you want the detail.

Then work through the easy things, roughly in this order:

1. Old codes. If you changed the code recently, try the previous one. Try your phone’s PIN, your bank card PIN and any code you use elsewhere, because people reuse codes more than they admit. Check how your app wants the code entered, too: many calculator vaults want the digits followed by =, and some switch to a separate PIN screen once you’ve opened them for the first time.
2. The decoy code. If you set up a decoy or fake PIN, it opens a second, deliberately boring vault. Typing it by mistake looks exactly like your files vanished. If a vault opens but it’s nearly empty, you may simply be in the decoy. Here’s how decoy vaults work.
3. Face ID or fingerprint. If you turned on biometric unlock, it may still work even though the code won’t come to you. If it does, don’t just enjoy being back in. Export or back up the contents straight away, and set a new code if the app lets you.
4. Wherever you might have written it down. A password manager, a note on your laptop, a screenshot of the setup screen (check it isn’t sitting inside the vault).

Pace yourself. Many vault apps answer wrong codes with a delay or a break-in photo. That’s harmless when the intruder is you, but a lockout timer can turn ten guesses into an evening.

How resets work in different vault apps

Vault apps fall into a handful of patterns. Look up yours in the app’s help pages or its store listing, ideally on another device so you’re not poking at the locked one.

Email or account reset

Apps with an account can send a code to your email. Keepsafe’s help center describes it: on iPhone, tap Forgot PIN in the top-right corner; on Android, open the three-dot menu, tap Reset PIN, then Send code. The code goes to the verified email addresses on your account, arriving five minutes after you ask as a security measure, and you use it to set a new PIN.

NQ Vault (listed on Google Play as “Vault - Hide Pics, App Lock”) says a Forgot Password option appears after a wrong password, if you set up a security email beforehand. Without one, its Q&A says files you backed up to its cloud can be recovered by reinstalling the app. Reinstalling wipes the local copy, so only take that route once you’re sure the cloud backup is complete. HideX’s listing says a forgotten password can be changed through email verification.

The catch with all of these: the email has to still work. If you set the vault up with an address you’ve abandoned, start by getting back into that inbox.

Security question

Some apps let you pick a question at setup and answer it later instead of the code. It needs no account and no internet connection, which suits apps that keep everything on the phone. The weakness is the one security questions always have: anyone who knows your first pet’s name knows your answer.

The 11223344 “master code”

The number repeated across forums and blog posts, 11223344, comes from one app: FishingNet’s Calculator - photo vault on Android. The FAQ in its Play listing says that if you forget your password, you type 11223344 into the calculator, press =, and retrieve your password by answering your security question.

Two things follow. It belongs to that app; typed into any other vault, it’s just a sum. And even in that app it isn’t a skeleton key. It opens the recovery step, and your security answer is what actually stands between a stranger and your files.

Paid reset

Hide It Pro on iPhone lists a “Password Reset” in-app purchase at $4.99 on the US App Store (as of October 2026). If that’s your app, read the developer’s instructions before you pay, so you know what the reset will ask of you.

No reset at all

Some apps tell you up front that a lost password means lost files. Private Photo Vault’s App Store listing says your Cloud Vault password is never backed up to its servers, so if you forget it you won’t be able to view your Cloud Vault data, and it asks you to write the password down. That isn’t the developer being unhelpful. It’s the design working: files encrypted with a secret only you hold can only be opened by you.

Why there’s no universal master code

A well-built vault doesn’t compare your code with a stored copy and then open a door. It uses the code to make the key. The files are encrypted, and the key that decrypts them is derived from what you type, through a deliberately slow process so every guess costs time. No code, no key. No key, and the files are just scrambled bytes.

In that design, a master code would have to be built into every copy of the app. Anyone who took the app apart could read it, and every user’s vault would be open to them. That’s why the master-code lists online don’t do anything to a vault that really encrypts.

The flip side: if an app can be opened by a number in its FAQ, a link to your email or a purchase, then something other than your code can reach your files. Maybe the key is also stored where the app can get at it, maybe it’s tied to your account on the developer’s servers, maybe the files are only hidden rather than encrypted. You can’t tell which from the outside. Researchers have found plenty of the last kind: in a 2022 study of 20 Android vault apps, only 5 even attempted to encrypt the files (those were the versions tested then, not necessarily the apps today).

That’s a trade-off, not a scandal. When researchers interviewed people who use vault apps, most wanted to keep things away from someone glancing at their screen or borrowing their phone, not from forensic experts. For that, an email reset is a fair deal: a little less secrecy for a way back in. If you want the other end of the deal, where nobody but you can ever open the vault, then nobody but you can ever reset it either. Our checklist on whether calculator vault apps are safe goes into how to tell which kind you have.

When the vault really is locked

If there’s no recovery route, or you never set one up, three things are left.

An old backup

On iPhone, iCloud Backup includes data for the apps you’ve downloaded, unless the app keeps it in iCloud Drive or excludes it, and a local backup made on a Mac or PC can hold app data too. When the abandoned Calculator+ vault stopped opening for many people after iOS 14.2, users in a long Apple Community thread got their files back by opening a Finder or iTunes backup with tools such as iMazing or iBackup Viewer and copying out the app’s folder.

Notice what that case was: an app that broke, not a forgotten code. A backup holds whatever the app stored. If the app encrypted it with your code, the copy is exactly as locked as the original. And restoring a whole iPhone from an old backup replaces everything on it, so back up the current state first, or use a tool that reads the backup on the computer instead.

On Android, Google’s automatic app backup is capped at 25 MB per app, and apps that handle sensitive data can opt out entirely, so a vault full of photos is very unlikely to be in it. Check instead whether you switched on the app’s own cloud backup, which Keepsafe and NQ Vault both offer. Restoring from that usually means reinstalling and signing in, so make sure the backup is complete before you delete anything.

The developer’s support

Write to the developer, from inside the app if it has a support option, or from the email address on your account so they can match you to it. Include your phone model, the app version and roughly when you set up the vault. Apps with accounts or cloud backup can sometimes help. If the app is local-only and properly encrypted, the honest answer will be no, and you should be wary of third-party “recovery services” that promise to crack it for a fee.

Accepting the loss

Sometimes the files are gone. If the vault was well built, that’s the same property that would have kept a thief out, working against you this once. Before you erase the app and start over, check one last time for a backup or an export, then set your new code up with the checklist at the end of this page.

If it’s Calculator Locker

We make Calculator Locker, so here’s exactly how it handles a forgotten code, including the parts that aren’t comforting.

• A recovery question. When you set your code, you can add a recovery question. The app’s security settings show you how to reach it from the calculator; answer it and the vault opens again, so you can get your things out. It doesn’t let you choose a new code, because changing the code needs the current one. The answer is protected on the phone the same way the code is, so choose one that isn’t on your social media.
• No reset link. There’s no account, so there’s no email to send a link to and no server holding a spare key. Without the recovery question there is no way in, for you or for us.
• No help from phone backups. On Android the vault is deliberately left out of Google’s phone backup and phone-to-phone transfer, and the key is tied to the phone’s secure hardware, so the code can’t be guessed on another device. The same design means a backup of the phone won’t contain a vault you can open somewhere else.
• The encrypted export. The one copy that leaves the phone is the optional encrypted export, saved to a file you keep and protected by its own passphrase. If you forget the code but still have an export and its passphrase, you can start a fresh vault with a new code and import it.

So our advice matches what the app tells you at setup: write the code down somewhere that isn’t the phone, and keep an encrypted export somewhere safe. The security details on the home page cover the rest.

Set up recovery before you need it

Ten minutes now saves the whole problem. For any vault app:

1. Find out how it resets. Read its FAQ or help page today and note which of the patterns above it follows.
2. Turn on the recovery it offers. Add the security question or recovery email. For email, use an address you’ll still have in five years.
3. Write the code down off the phone. A password manager on another device, or paper somewhere private. Not a note on the same phone, and certainly not inside the vault.
4. Keep a backup the app can restore. An encrypted export, or the app’s own cloud backup if you’re comfortable with that, and check that you can actually open it. You’ll need it anyway when you move hidden photos to a new phone.
5. Keep the decoy code distinct. Make it different enough from the real one that you can’t mix them up half asleep.
6. Type the code now and then. Biometric unlock is convenient, but it can stop working, for example after you set up a new face or fingerprint. If you never type the code, you’ll forget it.
7. Watch for abandoned apps. An app that hasn’t been updated in years can break after a system update, as Calculator+ did. If yours looks unmaintained, export your files while it still opens.