Can Hidden Photos on iPhone Be Leaked?
Yes, they can. Hidden photos are still ordinary photos in your library, and Apple does not describe separate encryption for them. Most leaks come from sharing settings, not from clever attacks.
Try Cryptile free: join the beta on TestFlight
What do I need to know?
- Hiding is not encrypting. The Hidden album keeps photos out of the main grid. It does not give them their own key.
- Other devices and people may see them. Hidden photos stay hidden on your other devices, and Shared Library members can unhide theirs.
- Your unlocked phone is the main risk. Face ID helps, but only until someone has the phone open.
How can a hidden photo reach someone else?
Apple says that with iCloud Photos on, photos you hide on one device are hidden on your other devices too. That means every device signed in to your Apple Account holds them. If one of those devices is shared or unlocked, the photos are exposed there.
You can hide the Hidden album itself, so it does not appear anywhere in the Photos app. That helps against a casual look. It does not change where the photos are stored. See Apple's Hidden album page.
Can Shared Library members see my hidden photos?
Yes. Apple's iCloud guide says hiding a Shared Library photo moves it to the Hidden album for all participants. They can view or unhide it. The details are in our Shared Library guide.
Does Face ID protect the Hidden album?
On iOS 16 and later, the Hidden and Recently Deleted albums ask for Face ID or Touch ID by default. That is a real barrier against someone picking up your phone. It does not help once the phone is unlocked and handed over.
Deleted photos also linger. Apple says they stay in Recently Deleted for 30 days before they are permanently deleted.
What can I do about it?
- Check who shares your library. Review Shared Library members and shared albums.
- Sign out of old devices. Remove any device you no longer use from your Apple Account.
- Keep the most private photos in a vault. Cryptile encrypts each file with AES-256-GCM. The keys come from a drawn pattern on your device, and the developer never holds them.
What this doesn't protect against
A vault cannot help while it is open, or if someone watches you draw your pattern. A pattern is weaker than a passphrase, so use 8 or more cells. Screenshots of an open photo are possible. If you lose both the pattern and the 9-word recovery phrase, the vault is gone. There is no reset.
Do it with Cryptile
Cryptile has no account and no server. A different pattern opens a different vault, and there is no vault list. Backup to iCloud is encrypted and included.
Cryptile is free to start. Plus adds more, and the app tells you when you reach it.