Tamper & Device Protection
Understanding Tamper Detection
Tamper Detection is a suite of active, real-time security monitors that protect your data while you are using the app. It automatically responds to threats by locking the app or taking other configured actions.
What is Tamper Detection?
While your vault protects your data at rest, Tamper Detection protects your data in use. It's a security system that constantly watches for signs of compromise or surveillance and takes immediate action.
UltraLocked actively monitors for several classes of threats:
- Screen Recording & Mirroring: Detects if your screen is being recorded or mirrored to another display (like AirPlay).
- Screenshot Attempts: Identifies when a screenshot is taken while the app is active.
- Debugger Attachment: Checks if a developer or forensic tool is trying to attach to the app to inspect its memory.
- Network Threats: Monitors for insecure Wi-Fi, man-in-the-middle attacks, and other network-based threats.
How UltraLocked Responds to Threats
When a threat is detected, the Tamper Response Coordinator determines the appropriate action based on your chosen Security Level. Responses can range from simply logging the event to immediately locking the vault or even initiating a full data wipe in critical situations.
You can view the status of these monitors in Settings > Security Monitoring.
Protection is Automatic
These security features are a core part of UltraLocked and are active by default. They are designed to be aggressive in order to prioritize the protection of your data above all else. For example, if screen recording is detected, your vault will be immediately hidden and locked.
Customizing Responses
In the Security Settings, you can view the health of each monitor and, in future updates, you will be able to customize the response level for different types of threats to match your personal security needs.