How to hide photos on iPhone, and what “hidden” really means
Hiding a photo
- Open the photo, or select several.
- Tap the … button.
- Choose Hide and confirm.
It disappears from your library, from Memories, from the Years and Months views, and from search. To find it again: Photos → Albums, scroll to the bottom, and open Hidden under Utilities.
From iOS 16, that album is locked behind Face ID, Touch ID or your passcode by default, and the same applies to Recently Deleted. If you cannot see the album at all, turn on Settings → Photos → Show Hidden Album — hiding the album itself is a separate switch from hiding the photos.
What hiding actually does
It solves one specific and very common problem well: the photo will not appear when someone is looking at your phone with your permission.
You hand your phone over to show a picture and they swipe. You AirPlay to a television. A colleague looks over your shoulder while you scroll. A photo widget shows a memory on your Home Screen at the wrong moment. Hiding prevents all of that, and it is a real benefit — the overwhelming majority of embarrassing photo incidents are exactly this and nothing more sinister.
The Face ID gate added in iOS 16 makes it meaningfully better than it used to be: an unlocked phone left on a table is no longer one tap from the Hidden album.
What it does not do
Being precise here matters, because the lock icon implies more than it delivers.
- It is not encryption. The photo is stored exactly as every other photo is. Hiding changes which album it appears in, not how it is written to disk.
- The Face ID gate is your Face ID. Anyone who can unlock your phone can open the Hidden album, because it accepts the same passcode. If someone knows your passcode, this protects you from nothing.
- It syncs. With iCloud Photos on, hidden photos are hidden on every device — and present on every device.
- It is in your backups. Hidden photos are included in an iCloud or computer backup like anything else. An unencrypted computer backup can be browsed.
- It is one well-known tap away. The Hidden album is a documented feature in a fixed location. It is not a secret; it is a tidy-up.
None of this makes the feature bad. It makes it a feature for social privacy rather than security, and those are different jobs.
Which problem are you solving?
Decide honestly which of these you actually have, because the right answer differs completely:
- “I do not want this in Memories or on a widget.” The Hidden album is exactly right. Stop here.
- “I do not want someone borrowing my phone to stumble on it.” The Hidden album, with the Face ID lock on, is right.
- “Someone who knows my passcode must not be able to see this.” Hiding does nothing for you. You need encryption with a separate secret.
- “If my phone were taken and unlocked, this must stay unreadable.” Same answer, and the separate secret is the entire point.
The third and fourth cases are the ones the Hidden album is regularly, and wrongly, used for.
The locked-note trick
Before installing anything, there is a genuinely encrypted option already on your phone that few people know about: the Notes app can lock a note, and a note can contain photos.
- Create a note and add the photos to it.
- Tap the … button and choose Lock.
- Set a note password, or use your device passcode.
- Delete the originals from Photos — and remember they sit in Recently Deleted for 30 days until you empty it.
Locked notes are genuinely encrypted, and if you set a separate note password rather than using the device passcode, that password is a distinct secret. It is clumsy for more than a handful of images, there is no album view, and forgetting the password means losing the note. But it is free, it is Apple's own, and for five photographs it is a perfectly reasonable answer.
When you need actual encryption
If the threat is someone with your unlocked phone, the requirements are specific:
- The files are encrypted at rest, so what is written to disk is unreadable without a key.
- The key is separate from your phone passcode. This is the part the Hidden album cannot offer.
- The originals are actually removed after being encrypted — a vault that copies your photos and leaves them in the library has achieved nothing.
- Nothing is uploaded. A vault that stores your private photos on someone else's server has moved the risk rather than removed it.
That last point deserves emphasis. The most sensitive photos on your phone are precisely the ones you should be least willing to hand to a company you have never heard of. Whatever you use, check what it contacts before you trust it with anything.
The cost of real encryption
Encryption that works has a consequence that gets softened in marketing copy and should not be: if you lose the key, nobody can recover your files. Not the developer, not Apple, not a support ticket. That is not a limitation of a particular implementation; it is what it means for encryption to be doing its job.
So before you move anything important into any vault, on any platform:
- Write the recovery key down and store it somewhere that is not the phone.
- Do not screenshot it into the photo library you are about to clean up.
- Make a backup of the vault if the app offers one, and keep it somewhere else.
- Test the whole loop — lock it, close the app, unlock it, restore something — with a photo you do not care about, before trusting it with one you do.
SweeperX's Secret Space is built to the list above: AES-256 with the key in your iPhone's Keychain, unlocked by Face ID or a PIN, verified by comparing a checksum of the decrypted copy against the source before the original is ever offered for removal, and it keeps telling you when the spare key is unsaved rather than looking finished. It also states the consequence plainly and makes you acknowledge it: lose the PIN and the spare key and the contents are gone, because there is no server, no account and nothing on our side to reset. The free tier covers five items, which is enough to test the whole loop before you decide to trust it.
Start here instead: How to Check Whether a Cleaner App Is Uploading Your Photos — four tests you can run on any app, including this one.