Are photo vault apps safe? What to check before you trust one

People put their most private files in photo vault apps: intimate pictures, scans of a passport, medical records, photos they don't want a partner or a curious kid to find. So it's fair to ask whether photo vault apps are safe before you hand one those files. This guide covers how to check any vault app with tools already on your iPhone, what to look for that those tools can't show you, and the mistakes that leave "hidden" files exposed. It's for anyone choosing a vault, or wondering whether the one they already use deserves their trust.

Are photo vault apps safe? The honest answer

Some are and some aren't, and the icon won't tell you which. A vault app can do one of two very different things:

• Hide files. The app puts a PIN or pattern screen in front of a gallery. The files themselves may be stored readable inside the app's storage. Anyone who gets past the lock screen, or gets at the storage directly, can see them.
• Encrypt files. The app scrambles each file with a key that is unlocked with your pattern or passcode. Without that secret, the stored data is unreadable, even if someone copies it.

This isn't just theory. In 2014 and 2015, independent researchers looked at older versions of popular iPhone vault apps and found photos stored without encryption, PINs saved in plain text, and lock screens that could be bypassed. Those findings describe versions from about a decade ago, not today's apps. Android research tells a similar story. A 2017 study of 18 Android vault apps found many didn't encrypt stored photos, and seven stored passwords in clear text. A 2022 study of 20 Android vault apps found most of their disguises could be uncovered with basic knowledge of the system.

The lesson isn't that vault apps are bad. It's that "vault" is a marketing word, and the only way to know what you're getting is to check.

Step 1: Check a vault app with tools already on your iPhone

Your iPhone can tell you a fair amount about an app before and after you install it.

Read the App Store privacy label

1. Open the App Store and go to the vault app's page.
2. Scroll down to App Privacy and tap See Details.
3. Look at which sections appear:
   • Data Used to Track You: data shared with other companies to follow you across apps and websites. A vault doesn't need this.
   • Data Linked to You: data tied to your identity, such as an email address or user ID.
   • Data Not Linked to You: data collected without your identity attached, often analytics or crash reports.
   • Data Not Collected: the developer says it collects nothing.
4. Check for Photos or Videos under any collected category. In a vault app, that tells you your content may leave the device in a form the developer handles.

Keep one thing in mind: developers fill in these labels themselves. Apple's own wording on every listing says they're not verified by Apple. Treat the label as a signal, not proof.

Check what Photos access the app has

1. Go to Settings → Privacy & Security → Photos.
2. Tap the vault app.
3. You'll see options such as Full Access, Limited Access or None.

A vault needs some access to import from your library. With Limited Access, it only sees the photos you pick. That's a reasonable choice if you only move a few photos in. You can change this setting at any time.

Turn on App Privacy Report

1. Go to Settings → Privacy & Security → App Privacy Report.
2. Tap Turn On App Privacy Report.
3. Use the vault for a few days, then come back and tap the app under App Network Activity.

This lists the domains the app has contacted. If an app says it has no servers and no analytics but keeps contacting advertising or analytics domains, ask why.

Consider whether you need a vault at all

For some people, the built-in tools are enough. On iOS 16 and later, the Hidden album in Photos is locked with Face ID, Touch ID or your passcode. The setting is at Settings → Apps → Photos → Use Face ID on iOS 18 and later, and Settings → Photos on iOS 16 and 17. On iOS 18 you can also touch and hold an app's icon and choose Require Face ID. The trade-offs are covered in iPhone Hidden album vs an encrypted photo vault.

Where the built-in checks stop

The privacy label, permissions and network report tell you what an app collects and who it talks to. They can't tell you:

• whether files are actually encrypted on the device, or just sit behind a lock screen
• how strong the key is, or whether someone who copies the app's data could guess it offline
• whether thumbnails and file names are protected along with the photos
• what happens after many wrong guesses
• whether the company can reset your access, and what that means for who else could

For these, you have to read the app's own security documentation. If an app doesn't explain them anywhere, that tells you something too.

The built-in Hidden album has its own limit. It opens with your iPhone's Face ID or passcode. If someone knows your passcode, which partners and family members often do, the Hidden album isn't a barrier.

What to check before you trust a vault app

Work through this list using the app's website, security page, privacy policy and App Store listing.

1. It names its encryption. Look for specifics such as AES-256 in GCM mode. Be wary of impressive-sounding encryption claims with no details behind them. Big words aren't proof of weakness, but they aren't evidence of strength either.
2. The key comes from your secret, and guessing is slow. Good apps turn your pattern or passcode into a key using a deliberately slow function such as PBKDF2 or Argon2id. Ideally the key is also tied to your device's hardware, so someone who copies the files can't try passwords on a computer.
3. Everything is encrypted, not just the photos. Thumbnails, file names, folders and the index can reveal a lot. Check whether they're covered.
4. It handles wrong guesses. There should be growing wait times after failed attempts, and ideally a counter that a reinstall or a change to the phone's clock can't reset.
5. You know who holds your files. Does it need an account with your email? Are backups on the company's servers or in your own iCloud? Are they encrypted before upload, so the storage provider can't read them?
6. Recovery is explained honestly. Some apps reset a forgotten PIN by sending a code to your email. That's convenient, but it means access depends on your email account. Other apps use a recovery phrase that only you hold, so nobody can let you back in, including the company. Neither approach is wrong. Just know which one you're choosing. (More in what a recovery phrase is and how to store it.)
7. It doesn't quietly compress. Some apps shrink photos to save space and keep the originals somewhere else. If quality matters to you, check that originals stay at full resolution on your device.
8. Ads and analytics are minimal or absent. Ad-supported vaults usually include third-party advertising code. Some ad-free apps still send analytics or crash reports by default. Check whether you can turn these off and what they might include.
9. The security model is published, and the limits are stated. Look for a page that explains the design and admits what the app can't do. An independent audit is a strong signal, but most vault apps, including small newer ones, haven't had one. If there's no audit, the app should say so.
10. The disguise is a bonus, not protection. A calculator-style icon can stop a casual glance. It isn't encryption, and research on Android found that disguises often fail. Judge the app on points 1–9.

To see how specific apps measure up, see the best photo vault apps for iPhone, compared fairly.

How VaultCave answers that checklist

VaultCave is one example of a vault built around this checklist. It stores photos, videos and documents (passports, IDs, medical records, contracts, any file), and PDFs open inside the vault. Here's how it maps to the points above:

• Encryption: AES-256-GCM. Files are encrypted in chunks, and each chunk is authenticated with its position, so tampering, reordering or truncation is detected. Each vault has a random master key, and each file has its own key.
• Key derivation: PBKDF2-HMAC-SHA256 with 600,000 iterations, bound to a device secret in the Secure Enclave. Files copied off the phone can't be attacked elsewhere.
• Everything encrypted: thumbnails, file names, folders and the index too.
• Wrong guesses: nothing for attempts 1–4. Then 30 seconds, 1 minute, 5 minutes, and 15 minutes each for attempts 8 and 9. At attempt 10, the pattern or passcode is disabled and the recovery phrase is required. The counter applies across all vaults, survives reinstalling and ignores clock changes.
• Account and data: no account, no sign-up, no VaultCave server holding your files, and no analytics, ads or trackers. The App Store privacy label is "Data Not Collected".
• Backup: optional encrypted backup to your own iCloud (CloudKit private database), on by default and free. Files are encrypted before upload, so neither Apple nor VaultCave can read them. It uses your iCloud storage, and the app tells you when a vault isn't backed up because iCloud is full.
• Recovery: a 12-word recovery phrase, shown once. VaultCave can't reset or recover it.
• Quality: originals are kept at full quality by default.
• Security model: documented on /security.

Setting it up looks like this:

1. Create a vault and choose how it opens: a pattern on a 5×5 dot grid (at least 6 dots) or a passcode (at least 6 characters). Don't reuse your iPhone passcode.
2. Write down the 12-word recovery phrase when it appears. You'll type back 3 of the words to confirm you saved it.
3. Choose whether to keep the encrypted iCloud backup on.
4. Import from Photos, Files or the share sheet. When importing from Photos, you can choose to delete the originals once the encrypted copies are verified.
5. Open Recently Deleted in Photos and delete the originals there too. Otherwise they stay for about 30 days.
6. Choose when the app locks after you leave it: immediately (the default), or after 30 seconds, 1 minute or 5 minutes. Locking removes the keys from memory.

VaultCave has honest limits too:

• It's iPhone and iPad only (iOS 17 or later).
• It has no Face ID or Touch ID, by design.
• Vaults don't sync between devices yet, though a backup can restore a vault onto a new device.
• It hasn't had an independent security audit yet.
• It's a new app, not yet on the App Store, so it has no ratings or reviews.

The free version gives you one vault with up to 100 items. Multiple hidden vaults, unlimited items, duress mode and disguised icons are Pro features.

Comparing your options

	Hidden album (Photos)	Require Face ID on an app	Encrypted vault app	Disguise-only vault app
Separate secret from your iPhone passcode	No	No (passcode is the fallback)	Yes	Varies by app
Files encrypted with your own key	No (standard device and iCloud encryption)	No	Yes, if the app does it properly	Varies; often unknown
Holds documents and PDFs	No	Depends on the app	Some do	Varies
Stops someone who knows your passcode	No	No	Yes	Varies
Backup	iCloud Photos	Depends on the app	Varies: your iCloud, vendor cloud or none	Varies
Costs	Free, built in	Free, built in (iOS 18)	Free tier or paid	Varies

What no vault app can protect you from

Even a well-built vault has limits. Know them before you rely on one.

• Screenshots and cameras. iPhone apps can't block screenshots, or someone filming the screen.
• Someone watching you unlock. If they see your pattern or passcode, they can open that vault.
• A compromised or jailbroken phone. Malware can see what's on screen while a vault is open.
• Copies outside the vault. Exported files, originals left in Recently Deleted, and photos already sent in a chat are readable.
• An unsafe situation. If a partner or family member monitors your phone, a new app or a sudden change can be noticed, and that can make things worse. A vault can't fix that. A local domestic-violence hotline can help you plan safely. If someone is threatening to share intimate images of you, StopNCII.org can help stop them spreading on participating platforms.

Mistakes to avoid

• Trusting the marketing. "Secure", "private" and impressive-sounding encryption claims aren't the same as published encryption details.
• Forgetting Recently Deleted. Moving photos into a vault and deleting them from Photos still leaves copies in Recently Deleted for about 30 days.
• Reusing your iPhone passcode. Anyone who knows your phone's code would try it first.
• Losing the recovery method. With phrase-based apps, losing both your passcode and the phrase usually means the files are gone. Store the phrase offline, somewhere safe.
• Assuming a backup exists. Check that backup is on and that your iCloud or vendor storage isn't full.
• Relying on the disguise. A fake calculator icon only slows down a casual look.
• Deleting the app to "clean up". On iPhone, that deletes the vault's files with it. Make sure you have a backup you can restore first.

The short version

• Some photo vault apps encrypt your files properly. Others only put a lock screen in front of them. Check before you trust one.
• Use your iPhone's own tools: the App Store privacy label, Settings → Privacy & Security → Photos, and App Privacy Report.
• Then read the app's security page. Look for named encryption, slow key derivation, limits on wrong guesses, encrypted thumbnails and names, and clear answers about accounts, backups and recovery.
• Treat disguised icons as a bonus, and remember that no vault can block screenshots or protect a phone that's already compromised.
• Clean up Recently Deleted after importing, and keep your recovery method somewhere safe.