HushboxIs the iPhone Hidden Album Safe? What It Protects and What It Doesn't
Short answer: the Hidden album is safe against casual snooping and not much more. It keeps photos out of sight and behind Face ID. It does not keep them from anyone who knows your iPhone passcode.
Whether that is "safe" depends on who you are worried about. Here is exactly what the album does, what it doesn't, and how to set it up properly.
What the Hidden album actually is
When you hide a photo, Photos marks it as hidden. The photo stays in the same library, in the same place on your device. It is just filtered out of your main library, your albums and the Photos widget, and shown only in the Hidden album.
That point matters: hidden is a flag, not separate encryption. Your iPhone does encrypt its storage, but a hidden photo gets no extra layer of encryption beyond what every other photo has. The album is a view with a lock on the door.
What it protects well
Casual scrolling
If you hand someone your phone to look at vacation photos, hidden items won't appear while they swipe. That is the main job of the album, and it does it well.
Someone who can't unlock your phone
Since iOS 16, the Hidden album is locked by default. It opens only with Face ID, Touch ID or your device passcode. A person who picks up your unlocked phone still can't open the album without one of those.
Surprises in your library
Hidden photos stay out of your main library and albums. If you just want certain pictures to stop appearing in everyday browsing, this is the simplest tool for it.
What it does not protect
Anyone who knows your passcode
This is the big one. The album unlocks with the same passcode as your phone. A partner, family member or anyone else who knows that passcode can open the Hidden album in a few seconds.
Your other devices
With iCloud Photos turned on, hidden photos sync to your other Apple devices and appear in the Hidden album there. If you share a Mac or iPad with someone, or they know the passcode of one of those devices, the album is only as private as the weakest one.
iCloud, unless you turn on Advanced Data Protection
iCloud Photos are end-to-end encrypted only when Advanced Data Protection is turned on. Without it, your photos are encrypted in iCloud, but Apple holds the keys. Hidden photos are treated the same as the rest of your library.
Its own existence
By default, the Hidden album appears by name in Photos. Anyone looking can see that you have one. You can switch this off, as shown below, but anyone with your passcode can switch it back on.
How to lock down the Hidden album
If the Hidden album fits your needs, take two minutes to set it up properly.
- Open Settings. In iOS 18, go to Apps › Photos. In iOS 17, go to Photos.
- Make sure Use Face ID (or Use Touch ID or Use Passcode) is on. This locks both Hidden and Recently Deleted.
- Turn off Show Hidden Album so the album no longer appears in Photos.
- Use a passcode that people around you don't know. A six-digit code or longer is a good start.
- If you use iCloud Photos, consider turning on Advanced Data Protection in your Apple Account settings. Read Apple's notes on it first: it puts recovery in your hands.
When the Hidden album is enough
- You want photos out of your main library and everyday browsing.
- Nobody around you knows your iPhone passcode.
- You don't share an iPad or Mac that syncs the same iCloud Photos library.
- You want something free, built in and backed up with iCloud Photos.
For many people, that covers it. There is no need to install anything.
When a separate vault helps
- Someone knows your passcode. A vault with its own passcode is the only way to stop them on the same phone.
- A shared device. A family iPad or a phone a child uses unlocked.
- You want the files encrypted on their own, not just flagged as hidden.
- You want a decoy. Some vaults offer a second passcode that opens a harmless set of photos.
A vault comes with responsibilities. If you forget the vault passcode and lose its recovery key, nobody can get the photos back. If you delete the app, the vault goes with it unless you exported first. See 8 things to check before you trust a vault app.
How Hushbox does this
Hushbox, coming soon to the App Store, uses its own passcode, separate from your iPhone passcode, with optional Face ID. Each photo and video is encrypted on your device with AES-256-GCM, and file names, dates and thumbnails are encrypted too. A recovery key that only you hold gets you back in if you forget the passcode. A decoy passcode is available in Hushbox Pro. See how Hushbox works.
FAQ
Is the Hidden album encrypted?
Not separately. Your iPhone encrypts its storage as a whole, and hidden photos get the same protection as every other photo, no more. Hiding only changes where the photo is shown.
Can I put a different password on the Hidden album?
No. The album uses Face ID, Touch ID or your device passcode. There is no option for a separate password.
If I turn off Show Hidden Album, are my photos deleted?
No. They stay hidden in your library. Turn the setting back on and the album reappears with everything in it.
Do hidden photos sync to my iPad?
Yes, if iCloud Photos is on for both devices. They appear in the Hidden album on the iPad, locked with that device's Face ID, Touch ID or passcode.