Vaultly ← Back to site

Hidden album vs photo vault

Last updated 2026-08-05

These two are constantly described as alternatives to each other. They are not the same kind of thing. One changes where a photo is displayed; the other changes what the photo is on disk.

What the Hidden album does

Hiding a photo moves it out of your main library view and into a Hidden album, which iOS locks behind Face ID. The file itself is untouched: same format, same readability, still in your photo library, still syncing to iCloud Photos if that is on.

It is a display rule. That is the correct mental model, and it explains every limitation below.

What a photo vault does

A vault re-encrypts the file with its own key, derived from a passcode you choose, and removes the original from the photo library. The bytes on disk become unreadable without that key - including to the operating system, to a backup, and to anyone imaging the storage.

Side by side

Hidden albumEncrypted vault
What it changesWhere the photo is shownWhat is written to disk
File on diskOrdinary readable imageCiphertext
KeyYour device passcode / Face IDA separate passcode you choose
LocationFixed and well knownInside the app's own storage
Syncs to iCloudYesNo, in Vaultly's case
Survives the phone being takenNoYes
Recoverable if you forget the keyYes, via your Apple AccountNo
CostFree, built inUsually a paid app

The one row that decides it

Look at the key row. The Hidden album is opened by your device passcode - the same six digits you type on a train, in a shop, in front of your family. Anyone who has ever watched you unlock your phone already holds the key to your Hidden album.

A vault's passcode is separate. That separation is the entire product; everything else is detail.

When the Hidden album is genuinely enough

It is enough, and a vault app is a waste of money, if all of the following are true:

Most advice in this category will not tell you that, because most of it is written by people selling vault apps. It is still true.

When it is not enough

That last case needs more than encryption - it needs something safe to show. That is what a decoy vault is for.

Using both

They are not exclusive. A reasonable arrangement is the Hidden album for mildly private things you still want in iCloud, and a vault for documents and anything genuinely damaging. Vaultly handles the second job: AES-256-GCM on device, a passcode separate from your device passcode, and no networking code at all, so the contents cannot leave the phone.

See also: every method of hiding photos on iPhone.

Questions

Is the iPhone Hidden album secure?

It is secure against casual browsing, and locked behind Face ID since iOS 16. It is not secure against anyone who knows your device passcode, because that passcode opens it. The photos themselves stay as ordinary readable files in your library.

Do photo vault apps really encrypt photos?

Good ones do, but the claim is worth checking rather than trusting. Two useful tests: whether the app works fully in Airplane Mode, and whether its App Store privacy label declares that no data is collected.

Can I use the Hidden album and a vault app together?

Yes, and it is a sensible split. Keep mildly private photos in the Hidden album where they still sync to iCloud, and put documents, IDs and anything genuinely damaging in an encrypted vault.

Does moving a photo to a vault remove it from iCloud?

It removes it from your device's photo library, which then propagates to iCloud Photos. Copies already in an iCloud backup or shared album are not affected, so check those separately.