Apps to Hide Photos on iPhone: The Four Kinds

1. The four kinds

Real apps mix these. A cloud locker can encrypt before uploading. A phone-only vault can offer an optional backup. The kinds are worth learning because each one answers the two questions that matter, where the files are and who can read them, differently. And the marketing rarely says which kind you are looking at.

2. Kind 1: Apple's built-in tools

Three of them, all free and all documented by Apple. The Hidden album moves photos out of the library, the widget and Memories, and since iOS 16 needs Face ID to open. App locking, from iOS 18, puts Face ID in front of the Photos app itself and takes its contents out of search and Siri suggestions. Locked notes can hold an image behind a separate Notes password, though not a video.

They share one property. Every one of them opens with your phone passcode, because they are all part of a phone the passcode already unlocks. And every one of them syncs through iCloud. For a glance or a scroll, they are the right answer, and the rest of this page is unnecessary. Our guides to the Hidden album and to locking the Photos app cover them step by step.

3. Kind 2: apps that only lock the screen

The simplest design in this category, and a common one. Photos are copied into the app's own storage as ordinary files. The app shows a PIN pad, a pattern or a Face ID prompt before its screen. Inside, an album grid. From the outside, it looks the same as an app that encrypts.

What it gives you: photos out of the Photos app, so out of the widget, Memories, search and the library. Plus a password that is not your phone passcode. That is a real step up from the built-in tools for a phone that gets handed around.

What it does not give you: any change to the files. The lock is part of the app's screen. Someone with a copy of the app's storage, from a device backup or a full copy of the phone, has ordinary image files. The listing for an app of this kind usually describes the lock ("PIN", "pattern", "Face ID") and says little or nothing about how the data is stored. That silence is a reason to ask the developer, not a verdict. A vague listing can sit in front of a careful app.

4. Kind 3: cloud lockers

Photos are uploaded to the developer's servers under an account you create. The benefits are the ones a server makes possible: access from several devices, a copy that survives a lost phone, and usually a password reset, because there is an account to send one to.

The costs come from the same fact. There is a server that holds your photos, with its own risk of being breached, its own staff, and its own legal exposure. There is an account that can be phished or taken over. Whether the developer can read the photos depends on where the encryption keys are. That is the single most useful question to ask. If a reset can give you your photos back, the developer holds something that unlocks them. That can be a perfectly reasonable trade, and it should be a knowing one. The App Store privacy label for an app of this kind will usually list User Content. That fits the feature and is not by itself a sign of anything wrong.

5. Kind 4: encryption on the phone

Photos are copied into the app's storage and encrypted there with a key made from a password you choose. What is stored is scrambled data. Someone with the unlocked phone, or a copy of the storage, has nothing they can read without the vault password. Obscura Photo Vault is this kind. Files are encrypted with AES-256-GCM, the key comes from your password through 600,000 rounds of PBKDF2, and there is no account and no server.

The thing that makes this kind different is also its cost. If no copy of the key exists anywhere but your head, nobody can reset it. Not the developer, not Apple. A forgotten password is permanent. What that means in practice, and the two habits that protect against it, are in what happens if you forget your vault password. Apps of this kind also cannot sync to other devices unless they add a server. At that point they become a mix of kinds 3 and 4, and the question of who holds the keys comes back.

The limits are the same as for any encrypted storage: a phone compromised while the vault is open, a password someone else knows, and copies of the photos that still exist elsewhere. A developer of this kind should say so. Ours does, in section 11 of the security paper.

6. Telling them apart in five minutes

Before installing anything, from the App Store listing and the developer's website:

1. Does it name what it encrypts and how? An encryption method and a way of turning your password into a key, for example AES-256-GCM and PBKDF2, means kind 4, or a cloud locker that encrypts on the phone before uploading. A description of the lock and nothing about the data is likely kind 2. What the terms mean is a separate guide.
2. Does it need an account? Sign-up means a server, which means kind 3, in whole or in part.
3. Can the developer get your data back? Yes means the developer holds a key. No means kind 4, and a permanent consequence for a forgotten password.
4. What does the privacy label say? Read it for fit. Cloud features plus User Content makes sense. A claim that nothing leaves your phone next to heavy tracking deserves a closer read.
5. Does it work in Airplane Mode? The one thing you can test. An app that works fully offline is not uploading while offline. Our guide to offline vaults with no account covers what that does and does not prove.

None of these steps tells you whether the app is built correctly. That needs the source code or an audit, and no listing provides it. They tell you which kind of app you are looking at, and whether the developer is willing to be specific. That is what you can know from outside.

7. Common questions

What is the best app to hide photos on iPhone?

It depends on who you are hiding from. For a glance or a scroll, the built-in Hidden album and app locking cost nothing and are enough. For someone with your passcode or your Apple Account, you need an app that encrypts the files on the phone with its own password. Which named apps publish that is a separate, sourced comparison. This page explains the four kinds so you can tell what you are looking at.

Do apps that hide photos actually encrypt them?

Some do and some do not, and the App Store listing is where to look. An app that encrypts names its encryption method, and how it turns your password into a key, in writing. An app that only puts a PIN screen in front of ordinary files usually describes the lock rather than the data. Silence is not proof either way. But a specific claim is the thing you can hold a developer to.

Is a free app to hide photos safe?

Price does not decide it. Free apps paid for by adverts list advertising data on their privacy label. That is how they make money, not a fault. And some free tiers encrypt exactly as the paid tier does. Judge the encryption claim and the privacy label, not the price.

Does hiding photos in an app remove them from the camera roll?

Not by itself. The app copies the photo into its own storage. The original stays in your library until you delete it, then sits in Recently Deleted for thirty days, still syncing to iCloud Photos. Hiding is finished when the original is gone from those places too.