Vaultumi

Can someone see your hidden photos on iPhone? Yes, in these cases

By Vaultumi. Published .

Hiding a photo feels like putting it in a drawer. On an iPhone it is closer to turning it face down on the table: it is out of the way, and the right person can still turn it over. Here is who that person is.

Quick answer

Yes, in two cases: when they know your device passcode, and when a copy of the photo exists somewhere else. The Hidden album is a visibility setting inside your Photos library. On recent versions of iOS it is locked with Face ID, Touch ID or your passcode, so a stranger without those cannot open it. Anyone with your passcode can.

  • A hidden photo is still a normal library item, so it follows your iCloud Photos settings.
  • Deleted originals and sent copies live on, outside the album.
  • For a lock that is separate from your phone passcode, move the photo into a vault app.

Who can open the Hidden album?

The people who can unlock your iPhone. The album uses the same Face ID, Touch ID or passcode that opens the phone, so in practice that means you, anyone whose face is enrolled on the phone, and anyone who knows the passcode.

That last group is larger than most people assume. Partners, parents, friends and children often know the passcode, and a passcode is easy to learn by watching. The lock is convenient because it is the same as your phone’s, and that is exactly its limit. Apple describes the album and its lock in its support article on the Hidden album, and the menus differ a little between iOS versions.

Where can hidden photos still show up?

Hiding changes how a photo is displayed. It does not move or copy it, so look at the places a photo can reach:

  • Other devices on your Apple Account. With iCloud Photos on, the library, including hidden photos, is available wherever you are signed in. A tablet that a family member uses with your account is a way in.
  • Recently Deleted. A photo you deleted stays there for about 30 days, and the album has its own lock.
  • Copies you sent. A message, an AirDrop or a shared album gives the other person a copy that hiding cannot reach.
  • Screenshots. They are saved to the main library as new, unhidden photos.
  • Apps with photo access. What an app can see depends on the access you gave it. Check Settings > Privacy & Security > Photos.
  • Backups. An iCloud or computer backup contains the library, hidden photos included.

What if the person knows your passcode?

Then the Hidden album gives you little, and so does locking the Photos app, because both lean on the same passcode. What helps is a second secret that the other person does not have.

A vault app provides that. In Vaultumi the photos leave your Photos library and are encrypted under keys that your own 6-digit PIN, an optional Face ID and a recovery code unlock. After 5 wrong PINs the app makes you wait, from 30 seconds up to an hour per attempt, and it never deletes anything because of wrong PINs. Knowing the phone passcode does not open it.

How can you check what others can see?

  1. Open Photos and find the Hidden album. Confirm that it asks for Face ID, Touch ID or the passcode, and check Settings > Photos for how it is set up on your iOS version.
  2. Look at Recently Deleted for photos you thought were gone.
  3. Open the shared albums and the message threads where you sent the pictures.
  4. List the devices signed in to your Apple Account in Settings, and remove any you no longer control.
  5. Review which apps have access to your photo library and remove access you do not need.

The guide to keeping private photos safe turns this into a routine.

When is a vault the better place?

A vault suits you when the photos are sensitive enough that the phone passcode is not a good enough gate, or when you want them out of iCloud Photos and out of the library entirely. It costs you responsibility: you hold the PIN, the recovery code and the backups, and nobody can reset them for you.

The free plan of Vaultumi holds up to 20 items and 2 albums, which fits a handful of truly private pictures. The guide to hiding photos on iPhone shows the three methods side by side, and the step-by-step import is in moving photos in and out of the vault.

What does a vault still not fix?

A vault is not magic. It does not protect a compromised or jailbroken iPhone, someone watching you type the PIN, or someone who makes you unlock the phone. It does not remove the original from Photos unless you delete it, and Vaultumi has not been independently audited. The audit status page and the security page list every limit we know of.

Sources

Primary sources behind the statements about iOS and cryptography on this page. The linked pages are in English.

All guides