Your life.
Beautifully kept.

In photo storage, the term usually describes a design in which the provider stores encrypted content without the secret needed to read it. MOC’s reviewed Android backup code encrypts media on the phone using a passphrase-derived key. This describes the content-encryption design; it is not a claim that the service knows nothing about your account, nor an independent security certification.

The reviewed Android backup path uploads encrypted media and encrypted thumbnails, not the readable originals or your passphrase. Your device decrypts them for viewing. The service still handles account information and operational metadata. A compromised device, weak passphrase, or implementation defect can change the protection; no independent audit is claimed.

Sign in, grant Android access to the photos and videos you want included, choose an available storage plan, and create your private passphrase when prompted. The app encrypts eligible files locally before uploading their copies. Verify backup completion before relying on a cloud copy.

No. The reviewed MOC setup uses a text passphrase, with a minimum of six characters, an uppercase letter, and a number. Choose a much longer, unique passphrase. Android’s fingerprint or screen-lock prompt may use your device PIN, pattern, or password for an optional unlock path; that is separate from creating the media-encryption passphrase.

The app’s recovery screen says MOC cannot recover it. A new key does not unlock photos encrypted with your old key. The exported key document contains a fingerprint, not the passphrase. Save your actual passphrase somewhere secure, outside this phone, before depending on the backup.

A locked phone and an unlocked phone are different situations. Local gallery originals remain on the device, and the reviewed app can remember your key and reopen without a fresh prompt. Encryption of cloud copies does not hide those originals or protect an already-open session. Use a strong device lock and Android’s lost-device controls.

The reviewed backup path reads gallery originals, creates encrypted copies, and uploads those copies. It does not remove the originals as part of backup. This also means local photos can remain visible in other gallery apps. Test a download and maintain another independent copy before deleting anything yourself.

The reviewed client derives the same media key from the same account email and passphrase. A supported device signed into that account needs the same passphrase to decrypt those backups. Do not assume that resetting your login password also restores your media key.

Yes. The Android backup implementation encrypts generated thumbnails before uploading them. After viewing, the app may keep decrypted media in an app-private disk cache on your device. Device security still matters.

Recipient-based encrypted album sharing, expiring public links, and shared-vault access were not verified in the reviewed MOC Android flow. Do not treat these as available features. If you download or export a readable photo and share it through another app, its protection depends on that app and the recipient can retain a copy.