Is the iPhone Hidden Album Encrypted?

What the Hidden album does

When you hide a photo, it disappears from your Library, your other albums and the Photos widget, and moves to one place: Collections → Utilities → Hidden.

Since iOS 16 that album is locked by default. To open it, you tap View Album and confirm with Face ID, Touch ID or your passcode. (For the steps, see How to Hide Photos on iPhone.)

That is useful. A friend scrolling through your camera roll won’t stumble on a hidden photo, and neither will a slideshow, a Memory or a widget.

Is it encrypted?

Not in any extra way. Apple says hidden photos “remain in your library”. They are not copied into a separate, encrypted space.

Every iPhone already encrypts what it stores, using a system Apple calls Data Protection. That covers hidden photos, but it covers your shopping list and your normal photos in exactly the same way. Hiding a photo adds no second key and no password of its own. The Face ID prompt checks who is holding the phone. It doesn’t lock the photo with anything new.

The weak point is your passcode

Face ID can always fall back to your iPhone passcode. So the Hidden album is only as private as that passcode.

That matters if the person you want to keep out is someone who:

• shares your home and has seen you type your passcode,
• uses your phone sometimes, like a partner or a child,
• asks you to unlock your phone and hand it over.

Anyone with the passcode can open the Hidden album. They can also go to Settings → Apps → Photos and turn Show Hidden Album back on if you had hidden the album itself.

What about iCloud?

If iCloud Photos is on, hidden photos sync like everything else. Apple says photos you hide on one device are hidden on your other devices too. So they’re as private as the least protected device signed in to your Apple Account, such as a shared iPad or a family Mac.

On Apple’s servers, it depends on one setting:

• Standard protection (the default): photos are encrypted in transit and on Apple’s servers, and Apple holds the keys.
• Advanced Data Protection (opt-in): photos are end-to-end encrypted, and the keys stay on your trusted devices. Shared Albums are the exception: Apple notes they don’t support Advanced Data Protection.

Where that leaves you

Make the built-in option a little stronger

1. Hide the album itself. In Settings → Apps → Photos, turn off Show Hidden Album, so the album doesn’t appear in Photos at all.
2. Keep your passcode to yourself. If someone has seen it, change it.
3. Turn on Advanced Data Protection in your iCloud settings if you want your iCloud photos end-to-end encrypted.
4. Empty Recently Deleted after you move or delete private photos, so copies don’t linger there.

When you need a separate lock

If the person you want to keep out could know your passcode, hiding isn’t enough. You need a vault that has its own key, separate from the iPhone passcode.

That is how Hidlet works:

• You draw a pattern on a 5×5 grid.
• The pattern becomes the encryption key for one vault, on your iPhone.
• Your photos are encrypted with that key before they’re saved.
• Different patterns open different vaults, and the app never lists them.
• Your iPhone passcode opens none of them, and there’s no account to break into.

Hidlet is coming soon to the App Store.