Forevault / Guides

How to Choose an App to Hide Photos: 9 Things to Check

By the Forevault team. Updated 5 November 2026. 8 min read. Apple Support pages linked in this guide were checked on that date.

In this guide
  1. 1. Is the encryption real, and where is it documented?
  2. 2. What happens if you forget the PIN or pattern?
  3. 3. Is there a backup you control, and can you test it?
  4. 4. Can you export without paying?
  5. 5. Does it need an account, and what does it collect?
  6. 6. How do photos get in, and do the originals stay in Photos?
  7. 7. Is it a decoy or is it encryption?
  8. 8. What happens when you switch phones?
  9. 9. Is the price clear, and is screenshot protection honest?
  10. How Forevault answers each check

The best app to hide photos is the one that passes nine checks you can run yourself: real on-device encryption, a recovery path that does not let the company in, a backup you control, free export, no account, a clean privacy label, a clear price, a plan for switching phones, and honest limits about what it protects. No list of “top apps” can check these for you, because they depend on what you are hiding and from whom.

This guide names no apps and ranks none. It gives you the questions to ask, where to find the answer, and a way to test each one before you trust a vault with photos you cannot replace.

1. Is the encryption real, and where is it documented?

“Military-grade” and “secure” on a store page mean nothing. Look for the name of the cipher and a statement that files are encrypted on the device, not just hidden behind a screen.

  • What to look for: a named algorithm such as AES-256, a plain statement that the files are encrypted at rest on the phone, and a support or privacy page that says so. A claim that appears only in the marketing text is weaker than one in documentation.
  • How to check: open the developer’s website and search for “encryption”. If the only mention is an adjective, treat the app as a lock screen over a folder.

Apple’s own platform already encrypts the flash storage on iPhone through Data Protection, which creates a new 256-bit key for every file. That protects data in general. A vault app adds its own layer on top, with its own key, so ask what that layer is.

2. What happens if you forget the PIN or pattern?

This is the check people skip, and it is the one that hurts later. An app that can reset your lock for you can also, in principle, open your files. An app that cannot reset it must give you a way to recover on your own.

  • What to look for: a recovery option that you hold, such as a written recovery phrase, and a clear statement of what the company cannot do.
  • How to check: read the recovery section of the app’s help page. Then ask yourself whether “email us and we will reset it” would also work for someone pretending to be you.

If there is no recovery path at all, a forgotten lock means the photos are gone, and that should be stated up front. The private photo vault recovery guide explains what can and cannot be brought back.

3. Is there a backup you control, and can you test it?

A vault that keeps the only copy of your photos on one phone is one lost phone away from losing them. A backup that you never tested is a guess.

  • What to look for: a backup that is encrypted before it leaves the phone, stored somewhere you own, such as your own iCloud, rather than on the developer’s servers.
  • How to check: back up, then restore onto a spare device or a second install. If the app offers a built-in way to test a restore, use it. If it offers none, do the restore yourself before you move your only copies in.

4. Can you export without paying?

You should be able to get your photos back out, in full quality, without a subscription.

  • What to look for: export to Photos or Files that works on the free tier and stays free if you stop paying.
  • How to check: import five test photos, try the export, and compare file sizes with the originals. Then look at the price page for any line that ties export to a plan. A vault that holds your files hostage behind a renewal is a subscription trap with a lock on it.

5. Does it need an account, and what does it collect?

Every account is another place your data can leak and another reason for the app to know who you are.

  • What to look for: no sign-up, and a privacy label that says no data is collected.
  • How to check: open the app’s page in the App Store and scroll to App Privacy. Apple’s page on privacy information explains that this section lists the data types an app may collect and whether they are linked to you or used to track you. It also says the information is self-reported by the developer, so it is a claim, not an audit. Read it alongside the app’s own privacy policy. If the label lists contact info, identifiers or usage data for a photo vault, ask why.

6. How do photos get in, and do the originals stay in Photos?

Importing a photo into a vault usually copies it. The original stays in your Photos library, and from there it can sync to iCloud, until you delete it.

  • What to look for: a clear import flow that tells you whether the original is kept, and an option to remove it from Photos after import.
  • How to check: import one photo, then open Photos and look for it. Check Recently Deleted too, because Apple keeps deleted items there for 30 days. A vault only keeps a photo private if you also deal with the copy you started from.

7. Is it a decoy or is it encryption?

Some apps disguise themselves as something else, such as a calculator. A disguise controls what someone sees when they glance at your home screen. It does not change how files are stored.

  • What to look for: the two things described separately. A disguise is a second line of defense. Encryption is the first.
  • How to check: ask whether the files would still be unreadable if someone copied the app’s storage without opening the app at all. The calculator vault apps guide covers what the fake calculator does and does not hide.

8. What happens when you switch phones?

Most people replace a phone every few years, and a vault is often forgotten in the move.

  • What to look for: a documented path for moving the vault, and a statement about whether a normal iPhone-to-iPhone transfer carries it.
  • How to check: read the developer’s page on moving to a new device before you need it. Then follow the steps in the guide to transferring a photo vault to a new iPhone and confirm that your recovery phrase or backup works on the new phone before you wipe the old one.

9. Is the price clear, and is screenshot protection honest?

Two last things that bite later.

Price. Find the price before you install. Look for whether it is a subscription, a one-time purchase or both, what the free tier actually allows, and whether a free trial rolls into a paid plan on its own. Apple’s page on managing subscriptions says that to stop a trial from converting you should cancel at least 24 hours before it ends. Set a reminder when you start one.

Screenshots. Some apps blur or block the screen when you take a screenshot or record the display. Test it yourself: open a photo, take a screenshot, and see what lands in your Photos library. If the app makes no claim, assume a screenshot works. If it claims protection, check that the claim holds on your iOS version.

How Forevault answers each check

Here is how our own app, Forevault, answers the checks. Verify each answer yourself, as you would for any app.

  1. Encryption. Files are encrypted on the device with AES-256-GCM.
  2. Forgotten lock. It opens with a pattern on a 5×5 grid, a passcode or a password, with Face ID optional. There is a 12-word recovery phrase. Keep it somewhere safe, because it is your way back in.
  3. Backup. An encrypted backup goes to your own iCloud, and a “Test a restore” option lets you confirm it works.
  4. Export. Export to Photos or Files is always free.
  5. Account and data. There is no account. The App Store privacy label reads “Data Not Collected”.
  6. Import. Run the test in section 6 on any app, ours included, so you know what happens to the original.
  7. Decoy or encryption. There is no calculator disguise. You can keep separate vaults, each opened by its own pattern, and the lock screen does not list them. It protects against someone holding your phone, not forensic analysis.
  8. New phone. See the transfer guide and the support page.
  9. Price. The free tier holds 100 photos, 10 videos and 3 vaults. Pro Yearly is $19.99 with a 7-day free trial, and Lifetime is $39.99 as a one-time purchase.

It does not claim to resist forensic analysis, and a vault you lock yourself can be lost, so read the recovery guide before you move anything irreplaceable in. Download Forevault on the App Store.

Frequently asked questions

What is the best app to hide photos on iPhone?

It depends on what you need to protect and from whom. Use the nine checks above on any app, including ours. If a store page cannot answer the encryption, recovery and export questions, that tells you something.

Is the built-in Hidden album enough?

For keeping photos out of casual browsing, yes. It is locked by default with Face ID, Touch ID or your passcode, but it stays in your Photos library. Apple says that with iCloud Photos on, photos you hide on one device are hidden on your other devices too. See whether the Hidden album is private for who can still see them.

Should I pick a free or a paid photo vault app?

Check what the free tier allows and what happens when you stop paying. The risk is not the price, it is a vault that locks your export behind a plan. Test export on the free tier before you commit.

How can I tell if a photo vault app collects my data?

Open its App Store page and read the App Privacy section. It is self-reported by the developer, so also read the privacy policy and check whether the app asks you to create an account.

What should I do before putting my only copies in a vault?

Run a backup and a restore, test export with a few photos, and write down your recovery method.

Sources

Every step is checked against these Apple pages on the date above. How we write and check our guides.