Can Someone See Your Hidden Photos on iPhone? Yes — Here's Who

The Hidden folder is easy to find

Photos → Albums → scroll down → "Hidden." One tap.

There's no secret path. No buried setting. It's labeled "Hidden" in a list of albums anyone can scroll through. The only gate is Face ID or your device passcode — the same one you type in front of people every day.

This has been the same since iOS 16. Nothing changed in iOS 26.

Who can see your hidden photos

1. Anyone with your device passcode

The Hidden folder uses the same lock as your phone. Not a separate password. Not a separate PIN. The same six digits you punch in at the grocery store.

Think about who has seen you type that code. Your partner. Your kids. Your coworker when you unlocked your phone to show them something. The person sitting next to you on the train.

The Wall Street Journal documented a wave of shoulder surfing attacks — thieves watch people enter their passcode, steal the phone, and gain access to everything. Including the Hidden folder.

2. Partners and family who know the code

This is the most common scenario. You share your passcode with your partner for convenience — Apple Pay, reading a text while driving, unlocking a shared iPad. That same code opens the Hidden folder.

There is no way to set a different password for the Hidden folder in iOS. Apple doesn't offer it. If someone knows your device passcode, they have full access.

3. Apple, via iCloud

If you use iCloud Photos — and most iPhone users do — your hidden photos sync to iCloud automatically. They're on Apple's servers, included in your iCloud backup, and accessible at iCloud.com.

Apple holds the encryption keys by default. Advanced Data Protection adds end-to-end encryption, but it's opt-in, not available in every country (Apple removed it from the UK in 2025 after a government request), and most users haven't turned it on.

4. Law enforcement via legal requests

Apple publishes transparency reports showing the volume of government data requests they receive and comply with. If your hidden photos are in iCloud, they're part of what Apple can hand over in response to a valid legal request.

This isn't speculation. It's Apple's own documentation.

The TikTok problem

"Check their Hidden folder" isn't insider knowledge anymore. It's a mainstream TikTok trend with millions of views. Videos walk through the exact steps: Photos → Albums → Hidden → enter passcode.

The Hidden folder's location is common knowledge. Treating it as a secret is like hiding a diary under your pillow and assuming nobody will look there.

The passcode sharing problem

Modern life makes passcode sharing nearly unavoidable:

• Couples share passcodes for convenience — directions, music, Apple Pay
• Parents give kids the code for iPad time or app downloads
• Work phones often have known passcodes across a team

Every person who knows your device passcode has full access to your Hidden folder. Apple provides no way to separate the two.

What the Hidden folder actually does

People think the Hidden folder encrypts their photos or puts them behind a separate password. It doesn't do either.

Here's what it does: it moves photos out of the main camera roll view. That's it. A visibility filter.

How vault apps solve this (or don't)

Most vault apps add a PIN screen on top of cloud storage. Your photos leave your device, sit on the app developer's servers, and are accessible to anyone with backend access.

Keepsafe describes itself as "cloud photo storage" on its own product page. HiddenVault lists "iCloud Backup + Restore" as a premium feature. You're paying $10-15/month to move your photos from Apple's servers to someone else's servers.

A PIN on an app is not encryption. It's a UI gate. It stops casual access, not determined access.

For a deeper look, see Are Photo Vault Apps Actually Safe?.

The only real solution: separate encryption with a different PIN

For photos to be genuinely private, three things need to be true:

1. Separate authentication — a PIN that isn't your device passcode
2. Per-file encryption — each photo encrypted individually, not just behind a lock screen
3. No server storage — photos stay on your device, not in iCloud or a developer's cloud

Inner Gallery does all three. Each space has its own PIN, separate from your phone passcode. Every photo is encrypted individually with ChaCha20-Poly1305, key derived via PBKDF2 with 100,000 iterations. Zero servers. Zero analytics. Zero tracking SDKs. The app doesn't even have network permissions.

Quick comparison

The bottom line

The Hidden folder was designed for convenience, not privacy. It keeps photos out of your main camera roll. It was never meant to stop someone who knows your passcode, an iCloud compromise, or a legal data request.

If your photos are sensitive enough to hide, they're sensitive enough to encrypt — with a key that nobody else has.

Related reading:

• iOS Hidden Folder vs a Vault App — detailed breakdown of what Apple's Hidden folder actually protects
• How to Hide Photos on iPhone — every method compared, from Notes lock to encrypted vaults
• Are Photo Vault Apps Actually Safe? — what Keepsafe, HiddenVault, and Private Photo Vault actually do with your photos
• Is iCloud Photos Really Private? — what Apple's fine print says about your photo library

Join the waitlist