Photo vault apps explained

A photo vault stores pictures behind its own lock. Encryption, keys and backups separate a strong one from a thin one.

A photo vault is an app that keeps pictures in its own storage behind a passcode, pattern or other lock, apart from your main library. The strongest designs encrypt files with a key derived from your secret. A weak design may only add a lock screen, so check what it says about encryption.

The terms photo vault, private photo vault and photo locker all describe the same idea, and some apps use those words as their names. This page explains the general category. It makes no claims about any specific app.

The basic idea

iPhone apps keep their own data apart from one another. Apple calls this sandboxing, and it restricts what data an app can access. A vault app uses this separation by copying your pictures into its own storage, where they stop appearing in the Photos library once you delete the originals. You then open the app with a code, a pattern, Face ID or some mix of those.

A vault differs from the Hidden album in one main way: it can have its own secret. That helps when the person you worry about knows your phone passcode.

Three designs behind the same icon

From the outside, vault apps look alike. Inside, they can work very differently.

Lock screen only. The app asks for a code before showing your pictures, but the files may not be encrypted with that code. This protects you from a person tapping around. It offers less against someone with deeper access.

Encrypted, with the company able to recover. Files are encrypted, but a password reset by email can restore access. This is friendly when you forget. It also means your secret is not the only way in, so ask who can use that path.

Encrypted with a key only you hold. The key comes from your secret, and nobody else has a copy. If you forget the secret, the photos are likely lost. This is the same tradeoff Advanced Data Protection asks you to accept for iCloud.

Moving photos in safely

  1. Import the photos into the vault.
  2. Open a few inside the vault to confirm they arrived in full quality.
  3. Test your backup or export, if the app has one, before you rely on it.
  4. Delete the originals in Photos.
  5. Remove them from Recently Deleted, or they stay there for 30 days.

With iCloud Photos on, deleting removes the photos from your other devices too. Copies you sent in Messages, in shared albums or to other people stay where they are.

Weak points of any vault

Your phone. If your phone is compromised or someone can watch your screen, the vault cannot help much while it is open.

Deleted app, deleted data. Removing an app removes its data from the iPhone. A kid clearing apps or a phone reset can wipe a collection if no backup exists.

The app’s presence. The icon tells people you have a vault, and someone who controls you may demand you open it. Disguises have limits, as the calculator apps guide explains.

The company. A subscription change or an abandoned app can leave you stranded, so favor an app that lets you export your photos.

Backroom

Backroom is an encrypted photo vault for iPhone, coming soon to the App Store. Our checklist for choosing an app applies to any app you consider, including ours.

Frequently asked questions

Is a photo vault safer than the Hidden album?

It can be if it uses encryption and a secret separate from your phone passcode, since the Hidden album opens with the passcode. The answer depends on the app, so check how it stores and protects files.

What happens to my photos if I delete a vault app?

Apple says deleting an app removes it and its data from your iPhone. If the app has no backup or you did not export your pictures, those photos may be gone.

What if I forget my vault password?

In a design with no account recovery, there may be no way back in. Other apps can reset your access through an account, which means someone else may hold a path to your data. Check before you move anything.

Where can I get Backroom?

Backroom is coming soon to the App Store.

Related pages

Sources