Vaultumi

Hidden album vs vault app vs iCloud Photos: what protects what

By Vaultumi. Published .

People compare these three as if they were rivals. They are not. One hides a photo from the grid, one keeps your library synced and backed up, and one locks chosen files under a separate secret. Which one you need depends on the problem you are solving.

Quick answer

The Hidden album hides, iCloud Photos syncs and backs up, and an encrypted vault locks. None of them replaces the others. The Hidden album and iCloud Photos belong to the Photos library; a vault is separate from it and protects chosen files under its own PIN.

  • Use the Hidden album to keep a photo out of the grid.
  • Use iCloud Photos to keep your whole library on every device and safe from losing the phone.
  • Use a vault for the few files that need a lock your phone passcode cannot provide.

What does each one actually do?

The Hidden album moves a photo out of your main library view into an album that recent iOS versions lock with Face ID, Touch ID or the passcode. The photo stays in the library.

iCloud Photos keeps your photos and videos stored in iCloud and up to date across your devices, as Apple describes in its iCloud Photos article. It is a sync and backup service, not a privacy lock. Hidden photos sync like the rest.

A local encrypted vault such as Vaultumi stores chosen photos, videos and PDFs in its own private storage on one device. Each item is encrypted with AES-256-GCM under its own key, and the keys are unlocked by a PIN, optional Face ID or a recovery code. There is no account and no cloud of its own.

How do they compare?

Hidden albumiCloud PhotosVault app (Vaultumi)
Main jobKeep a photo out of the gridSync and back up the libraryLock chosen files
Where the photo livesIn your Photos libraryIn the library and in iCloudIn the app’s encrypted storage
What opens itDevice passcode, Face ID or Touch IDYour Apple AccountIts own PIN, optional Face ID, recovery code
Leaves the deviceYes, if iCloud Photos is onYes, by designNot by itself; included in device backups as encrypted files
If you lose the secretApple account and passcode recoveryApple account recoveryRecovery code or backup file; nobody else can help
CostIncluded with iOSFree storage tier, paid plans above itFree plan with limits, Premium for more

What does each one protect against?

  • A friend glancing through your phone. The Hidden album is enough. A vault is stronger.
  • Someone who knows your passcode. The Hidden album and iCloud Photos do not help. A vault with its own PIN does.
  • Losing or breaking the phone. iCloud Photos helps most. For a vault you need your own backup file and recovery code.
  • Someone getting into your Apple Account. iCloud Photos is the exposed one. By default Apple holds the keys for most iCloud data, and the optional Advanced Data Protection extends end-to-end encryption to more categories, which Apple explains in its Advanced Data Protection article. A local vault is not in iCloud Photos.
  • A stolen backup. A vault’s files in an iPhone backup are encrypted and cannot be used to test PIN guesses without the device-only secret.

Which combination makes sense?

  1. Everyday photos, low sensitivity. iCloud Photos on, nothing else. Optionally hide a few from the grid.
  2. A few photos you would hate to see exposed. iCloud Photos for the library, a vault for those items. Delete their originals and clear Recently Deleted.
  3. You distrust any cloud. Keep iCloud Photos off after making sure full-size originals are on the phone, use a vault, and keep a backup file on a drive you control.

The iCloud Photos versus local vault guide goes deeper on the cloud side, and the hidden album versus vault app guide on the lock side.

Does iCloud Photos back up your vault?

No. iCloud Photos covers the Photos library, and a vault app’s files are not in it. If you also use iCloud device backup, the encrypted vault files are included in that backup, but the device-only secret that your PIN needs is not, so a restored iPhone opens the vault with the recovery code instead. The copy to rely on is a backup file that you make inside the app and test. The guide to backing up a photo vault shows how.

What do all three leave open?

Screenshots go to your Photos library whatever you use. A photo you already sent is a copy you cannot recall. A compromised or jailbroken iPhone defeats every option here, and so does someone watching you type a PIN. Vaultumi also has not been independently audited, which the security page says up front.

How do you combine them without undoing the privacy?

  • After moving a photo into the vault, delete the original from Photos and then from Recently Deleted.
  • Check that the photo was not already copied into a shared album or sent in a chat.
  • Do not export vault items back into Photos unless you intend them to sync.
  • Make a vault backup file and test it, because iCloud will not hold your vault’s only copy for you.

Sources

Primary sources behind the statements about iOS and cryptography on this page. The linked pages are in English.

All guides