Is the iPhone Hidden Album Encrypted? What It Actually Does
No — not in the way most people mean. The Hidden album is a view filter. Since iOS 16 it's locked behind Face ID, Touch ID or your passcode by default, which stops someone from casually scrolling into it. But the photos inside are still regular items in your Photos library: they sync to iCloud Photos like everything else, they show up in some third-party apps that have full library access, they come back if you turn the album's visibility on in Settings, and anyone who knows your passcode can open the album. Whole-device encryption covers them exactly as much as it covers your other photos — no more.
What the Hidden album does
- Removes the photos from the main library view, Years/Months/Days, and search.
- Puts them in an album called Hidden under Utilities (iOS 18 and later) or at the bottom of Albums (iOS 16–17).
- Requires Face ID, Touch ID or the passcode to open that album (iOS 16+, on by default; Settings → Apps → Photos → Use Face ID).
- Lets you hide the album entirely (Settings → Apps → Photos → Show Hidden Album off), so it doesn't appear in the Albums list at all.
That's a genuinely useful feature for the gift-idea, surprise-party, embarrassing-screenshot tier of privacy.
What it does not do
It doesn't encrypt anything separately. Hidden photos are stored in the same Photos library database as everything else. iOS protects that database with device encryption when the phone is locked; once unlocked, it's readable.
It still syncs to iCloud Photos. Hidden is a flag, and the flag syncs along with the photo. Unless you've turned on Advanced Data Protection, Apple holds the keys to those photos in iCloud.
Your passcode opens it. Face ID is a convenience in front of the passcode. Anyone who knows the passcode — a partner, a parent, a police officer you've unlocked for — can open Hidden. In many places you can be compelled to provide a passcode; in fewer places can you be compelled to reveal a secret only you know for a separate app.
Apps with full Photos access can see them. When you grant an app "Full Access" to your photo library, the Hidden album is included unless the app specifically filters it out. Limited Access (choosing specific photos) avoids this.
Forensic tools read the library. If a phone is unlocked (or its passcode is known) and connected to an extraction tool, the Hidden album is just another album. This is not theoretical — it's the standard way phones are examined.
A backup restores it in the open. Restore your phone from an iCloud or Finder backup and the Hidden album comes back with the same flag — fine — but an unencrypted local Finder backup contains the photos as ordinary files.
The practical test
Ask: who am I hiding this from?
- Someone glancing over your shoulder or scrolling your camera roll → Hidden album is enough.
- Someone who knows your passcode → Hidden album is not enough.
- Someone who could get your iCloud data (Apple, a subpoena, an account breach) → turn on Advanced Data Protection; Hidden alone does nothing here.
- A phone that leaves your hands unlocked (repair, border, lending it to a kid) → you need a separate encrypted container.
If you need more than Hidden
Our guide on how to encrypt photos on iPhone covers the options in order of effort. The short version: turn on Advanced Data Protection for the iCloud side, and for the on-device side use a vault that encrypts each file under a key the phone's passcode doesn't unlock. Then delete the originals — including from Recently Deleted — because the Hidden album copy is still a copy.
What this doesn't protect against
If someone can watch you unlock a vault, or your phone is compromised while it's open, no app can help. And a vault is only as private as the secret in front of it: use a long pattern or passphrase, not something a friend could guess from watching once.
Do it with Cryptile
Cryptile keeps its photos out of the Photos library entirely. They're encrypted on your device under a key derived from a pattern only you know, there's no account and no server, and a different pattern opens a different vault — so even handing over a pattern doesn't have to mean handing over everything.
Cryptile is free for up to 100 photos and 10 videos: encrypted vaults, no account, no server. Plus removes the limits and adds encrypted sending in Messages, search and Files access as they ship, for $19.99 a year or $39.99 once, the same price every day; there is no timer. Get Cryptile on the App Store