Security
Security at Failshot.
Failshot is your Mac’s second layer, so what it records is protected just as carefully. This page shows how. How Failshot works, in depth has more.
Kept on your Mac
Photos and video stay on your Mac. Turn on email alerts or the web vault, and only what you didn’t confirm as yours leaves it, over an encrypted connection.
Encrypted before upload
Turn on the web vault and every photo is encrypted on your Mac before it’s uploaded. We store only the encrypted copy, and we can’t open it.
Two factors for the vault
The vault opens with your vault password and a passkey or an authenticator code.
No Mac password to switch off
Switching Failshot off takes Touch ID, or your Failshot PIN and answer. Never your Mac password.
Signed and notarised
Failshot for Mac is signed with an Apple Developer ID certificate and notarised by Apple, which means Apple’s automated service has scanned it for known malicious software. Each update’s signature is checked before it installs.
Alerts pass straight through
Alerts pass through our service to your inbox. Our service keeps no copy.
What we can see, and what we can’t
- Photos and video on your Mac
- We can’t see them. They leave your Mac only through the email alerts or web vault you turn on, or while the Mac is joined to an organisation.
- Photos in the web vault
- We can’t open them. Only you can, with your vault password and a second factor.
- Email alerts
- They pass through our service in memory and are never stored there. Our email provider keeps sent emails for 30 days.
- Your account
- Your email address and how you signed in, so alerts reach you. The Privacy Policy says where each is kept, and for how long.
The Privacy Policy lists everything we keep, why, and for how long.
How we work
- Email alerts, location, sound and the web vault are off until you turn them on.
- Your Failshot account has no password of its own. You sign in with Apple, Google, or a link we email you.
- We don’t sell personal data, and the apps carry no advertising or analytics software.
- Deleting your account deletes what our service holds for it and signs out every device.
Reporting a security issue
If you think you’ve found a security problem in Failshot, its website or the web vault, email support@failshot.app with “Security” in the subject. Tell us what you found, how to reproduce it, and which version you used. Please give us time to fix it before you share it publicly. Our security.txt has the same contact.