Private Photo Vault Recovery: What You Can Get Back
In this guide
Part of The iPhone Privacy Guide, every setting that keeps your photos, apps and messages private.
Private photo vault recovery depends on what the app kept besides your PIN or pattern. If it offers a reset by email, a recovery phrase or a backup you can restore, you can usually get back in. If it encrypts your photos on the phone and keeps no copy of the key anywhere, nobody can open the vault for you, including the developer.
This guide covers how recovery works in vault apps in general, what to do in the first hour if you are locked out, and how to set things up so it never happens again. It does not describe any specific app’s reset process. Each app does this differently, so check the help page of the app you use.
How recovery works in vault apps
Vault apps tend to use one or more of four mechanisms. Which ones you have decides how much you can recover.
Reset by email or account
Some apps tie the vault to an email address or an account. If you forget the PIN, they send a reset link or a code. This is the easiest path for you, and it means the developer holds some way to bring you back in. That has a trade-off. Whatever lets the developer reset your PIN is also a door that someone else could try.
A recovery phrase
Other apps give you a list of words at setup, often 12, and ask you to write them down. The phrase can rebuild the key that opens the vault. If you wrote it down, recovery takes a minute. If you skipped that screen, there is nothing to type.
Backups
A backup helps when the vault is gone but you still know the password, for example after a lost phone. It does not help if you forgot the password, because an encrypted backup needs the same key.
Apple’s iPhone backup can include app data. Apple says iCloud Backup includes data for apps you have downloaded, unless the app stores its data in iCloud Drive instead. Whether a given vault app’s photos are part of that backup is up to the app, so look at its help page before you rely on it. You can restore an iCloud backup during setup of a new or erased iPhone, as Apple’s restore steps describe: on the Transfer Your Apps & Data screen, tap From iCloud Backup.
What is impossible
If the app encrypts photos with a key derived from your PIN, pattern or password, and it has no reset, no phrase and no backup you can open, the photos cannot be recovered. That is how the encryption is supposed to work. A tool or service that promises to open such a vault without the key deserves suspicion. File-recovery software can find deleted files, but it cannot decrypt a file whose key no longer exists.
What to do right now if you are locked out
Work through these in order. The first one matters most.
- Do not delete the app. Apple states that deleting an app removes it and its data from your iPhone. If the vault lives only on the phone, deleting the app can destroy the encrypted files that a recovery phrase or backup would have opened.
- Try every PIN, pattern and password you might have used. Try the version you set when you first installed the app, and any biometric option on the lock screen.
- Look for a “Forgot” option on the lock screen or in the app’s settings. If there is one, follow it before doing anything else.
- Find the recovery phrase. Check notebooks, password managers, screenshots and notes you made around the time you installed the app.
- Read the developer’s help page for the app, or contact the developer. They can tell you what recovery the app supports. Do not send them your photos or your PIN.
- Check for a backup. If you have an iCloud or computer backup from a time when you still had access, you may be able to restore it. Think before you erase or set up a phone as new. Apple notes that setting up as new creates iCloud backups that replace your saved ones, so if an old backup might hold your vault, do not make a new one on top of it first.
- Look in the Photos app. If you moved photos into the vault and deleted the originals, check Recently Deleted. Apple keeps deleted photos there for 30 days and unlocks the album with Face ID, Touch ID or your passcode.
If none of these work and the app has no reset, accept the loss before spending money on a recovery service. Ask any service what exactly it will do and how, and walk away if the answer is vague.
Common situations
New iPhone, empty vault. Reinstalling the app does not bring the photos back. The photos have to come from a backup, either the app’s own or an iPhone backup restored during setup of the new phone.
Forgot the PIN, but Face ID still works. Use it to get in, then change the PIN and copy down any recovery phrase while you are inside.
Lost or broken phone. You need a backup made before it happened. This is the case where a tested backup earns its place.
How to avoid getting locked out again
- Write the recovery phrase on paper and keep it away from the phone. A photo of it in your camera roll defeats the purpose.
- Turn on the app’s backup and then test it. A backup you have never restored is a guess.
- Export copies of photos that matter to Photos or Files now and then. Any vault app worth using lets you export.
- Pick a PIN you can remember a year from now. A strong one you forget is worse than a decent one you know.
- Use an app that tells you plainly what happens if you lose the key.
How Forevault handles recovery
Forevault is our own photo vault app for iPhone, so weigh this section accordingly. Your files are encrypted on the device with AES-256-GCM. You open it with a pattern on a 5×5 grid, or a passcode or password, and Face ID is optional. At setup you get a 12-word recovery phrase. On the lock screen you tap Forgot? and enter the phrase to get back in. Backup goes to your own iCloud, encrypted, and “Test a restore” lets you check it while your current phone still works. Export to Photos or Files is always free. There is no account and no data collected, so there is no email reset and we cannot open a vault for you.
Forevault protects against someone who is holding your phone. It is not built to stop forensic analysis. The steps for using the phrase and backup are on the support page. Download Forevault on the App Store.
Frequently asked questions
Can the app developer reset my photo vault PIN?
Only if the app was built to allow it, through an email or account reset. If the app encrypts on the device and keeps no copy of your key, the developer cannot reset anything.
Does iCloud Photos keep a copy of photos in my vault?
Only if the photos are in the Photos app. Photos you moved into a vault app and removed from Photos are not in iCloud Photos. Your Hidden album is part of Photos and follows iCloud Photos, but a vault app is a separate store.
Is it safer to use the built-in iPhone options?
They have a different failure mode. Apple’s locked notes, for example, use your device passcode or a separate notes password, and Apple says it cannot help if you forget a separate notes password. The guide to locking photos on iPhone compares the built-in options.
Sources
- Apple says support.apple.com
- Apple's restore steps support.apple.com
- Apple states support.apple.com
- Apple keeps deleted photos there for 30 days support.apple.com
- Apple says it cannot help support.apple.com
Every step is checked against these Apple pages on the date above. How we write and check our guides.