Someone Went Through My Unlocked iPhone Photos. Now What?

Hidlet is an iPhone app

Point your iPhone camera at the code to install. No account needed.

or text me the link

You left the room for ten minutes. A houseguest had your phone to check the weather, or a coworker borrowed it to look up a number, and your phone was already unlocked. When you come back, the photo grid is open and the person’s face does that small, careful thing. They went further than the weather.

The honest catch: an unlocked iPhone is an open book to whoever holds it, apart from the few places Apple locks again. This article covers what they could and couldn’t see, what to change so it doesn’t repeat, and where a vault is the better answer. No shame in any of it. Phones get handed around.

What they could see

On an unlocked iPhone, the Photos app shows its Library and your albums with no further question. That means:

• The Library. Every photo you didn’t hide: the whole strip, plus Albums, People, Places and Memories as they appear in your Photos.
• Other apps. Messages, Mail, Notes and any other app that isn’t locked.
• Photos you share. Anything in a Shared Album or Shared Library. Do Hidden Photos Show Up in Shared Albums on iPhone? covers that.

What they could not see

The Hidden album. Apple says it is locked by default on iOS 16 and later. On iPhone, opening it asks for Face ID or Touch ID (with your passcode as the usual fallback), even when the phone is already unlocked. Hidden photos also don’t appear in the Library, other albums or the Photos widget. If you turned off Settings → Apps → Photos → Show Hidden Album, the album isn’t visible in Photos at all.

Recently Deleted. Apple says Face ID or Touch ID is required to view the Hidden and Recently Deleted albums by default, and that deleted photos stay there for 30 days. So deleting a photo didn’t remove it, but it was behind the same lock.

Apple also lets you switch that lock off for these albums (Use Face ID in the Recently Deleted settings), so check yours is still on. The limit: it is your phone’s own lock. If they know your passcode, or you unlocked the album for them, the lock didn’t stop anything. See How to Hide Photos From Someone Who Knows Your iPhone Passcode.

What to do, in order

1. Work out what was visible. Open Photos and look at it the way they did. What is in the Library that you wouldn’t want seen? That is your to-do list.
2. Hide the sensitive ones. Touch and hold a photo, then tap Hide. The steps are in How to Hide Photos on iPhone.
3. Shorten Auto-Lock. Open Settings → Display & Brightness → Auto-Lock and choose a short time. A shorter time means the phone locks sooner by itself (our reasoning). Apple notes only that delaying or preventing Auto-Lock may increase power consumption, so a short setting doesn’t cost battery on Apple’s account.
4. Don’t leave it unlocked. If you hand the phone over, stay beside it, or start a Guided Access session first (Settings → Accessibility → Guided Access) so it stays in one app. How to Show Someone One Photo Without Them Scrolling walks through it.
5. Check who can unlock it. If they might have seen your passcode, change it. Then move to the vault step for photos you can’t risk again.

If you feel your safety is at risk, for example because someone controls your phone or accounts, put that first. Apple’s Personal Safety guide has steps for checking who has access, and local support services can help.

The vault step

A vault takes the photos out of the strip. Hidlet works like this: you draw a pattern on a 5×5 grid and that pattern opens one vault. The photos are encrypted on your iPhone and aren’t in your photo library, so a person who scrolls your unlocked phone doesn’t find them there. Hidlet locks the moment you leave the app, and its app-switcher preview is covered. You import from Photos with the + button; Hidlet then offers to delete the originals from Photos; nothing is deleted unless you choose it. Also empty Recently Deleted, since it holds deleted photos for 30 days. Hidlet is available on the App Store.

What Hidlet can and can’t protect

• It protects photos inside a vault from someone going through your unlocked phone.
• It can’t undo what someone already saw, or protect photos you left in your library.
• It doesn’t help if someone watches you draw the pattern, or if you open the vault in front of them.
• App icons (Pro) can change to look like something else, and any vault can serve as a harmless one if you are asked to open the app. Neither hides the app from everything on your phone, such as Screen Time.