# Can Apple see hidden photos? What Apple can and can't access

> Can Apple see hidden photos? Where your Hidden album lives, when Apple holds the keys, what Advanced Data Protection changes, and how to lock it down.

Published 2026-11-04 · https://vaultcave.app/guides/can-apple-see-hidden-photos

**Hiding a photo doesn't change who can read it. On your iPhone, Apple doesn't look at your library. In iCloud Photos with standard data protection, Apple holds the encryption keys, hidden photos included. Turn on Advanced Data Protection and Apple no longer holds the keys for iCloud Photos, except for Shared Albums.**

If you've moved photos into the Hidden album, you may be asking the obvious next question: can Apple see hidden photos? This guide gives a straight answer. It covers where a hidden photo is actually stored, when Apple holds the keys to it and when it doesn't, and the settings to change on your iPhone if you want Apple out of the picture. It's for anyone keeping something personal in Photos, from intimate pictures to scans of medical letters, who wants to know who can read it.

## What "hidden" actually means on iPhone

The Hidden album controls what shows up on your screen. It doesn't control who holds the keys to a photo.

When you hide a photo, iOS takes it out of your Library, Memories, widgets and search results, and moves it into an album that, on iOS 16 and later, needs Face ID, Touch ID or your passcode to open. That's useful if someone picks up your phone. But it's still the same photo in the same library. If iCloud Photos is on, the hidden photo syncs to iCloud and to your other devices just like the rest of your library does.

So whether Apple can see hidden photos comes down to where the photo is stored and how that storage is encrypted. Hiding it makes no difference to either.

## Can Apple see hidden photos? It depends on where they're stored

### On your iPhone

Photos stored on your iPhone are protected by iOS Data Protection, which is tied to your device passcode. Apple doesn't look through your library on your device. Features like face grouping, Memories and photo search run on the iPhone itself. If a photo never leaves your phone, Apple has nothing to read.

There's one feature to know about. Enhanced Visual Search (iOS 18 and later) helps Photos recognise landmarks and places by sending encrypted information about parts of some photos to Apple. Apple says it's designed so that Apple doesn't learn what's in your photos. If you'd rather nothing about your photos leave the device, you can turn it off (steps below).

### In iCloud Photos with standard data protection

Standard data protection is the default for iCloud. Your photos are encrypted in transit and on Apple's servers, but **Apple holds the encryption keys**. That's what lets Apple help you recover your data if you lose access to your account. It also means Apple can technically decrypt your iCloud Photos, and it can hand them over in response to valid legal requests. Hidden photos are treated the same as every other photo.

### In iCloud Photos with Advanced Data Protection

Advanced Data Protection is an optional setting (iOS 16.2 and later) that makes iCloud Photos, iCloud Backup, iCloud Drive, Notes and several other categories end-to-end encrypted. The keys stay on your trusted devices, so **Apple can't decrypt your iCloud Photos, hidden or not**. The trade-off is that Apple can't help you get your data back if you lose access. You have to set up a recovery contact or a recovery key before you can turn it on.

There are a few honest caveats:

- **Shared Albums aren't covered.** Apple lists the Shared Albums feature in Photos as not supporting Advanced Data Protection. Anything you post to a Shared Album stays under standard protection.
- **Some metadata isn't end-to-end encrypted.** Apple says items such as dates, file sizes and checksums stay readable to it so the service can work.
- **It isn't offered everywhere.** In 2025, for example, Apple stopped offering it to new users in the UK. If you don't see the option, check Apple's support page for where it's available.

### In iCloud Backup

If iCloud Photos is off, your photos are usually included in iCloud Backup. Under standard data protection, Apple holds the keys to that backup too. With Advanced Data Protection, iCloud Backup is end-to-end encrypted.

### Photos you've sent to other people

Once you've sent a photo through Messages, email or another app, the copy is out of your library's control. It's protected by whatever that service and the recipient's device do. Hiding or deleting your copy doesn't change theirs.

## How to check and limit what Apple can access

These steps use the built-in iPhone settings. On iOS 18 and later, app settings sit under Settings → Apps. On iOS 17 they're listed directly in Settings.

1. **Check whether iCloud Photos is on.** Go to Settings → [your name] → iCloud → Photos. On iOS 18 and later, Photos appears under "Saved to iCloud". If syncing is on, your hidden photos are in iCloud.
2. **Decide whether you want photos in iCloud at all.** If you turn off syncing, iOS asks whether to download the originals to your iPhone first. Make sure you have enough space before you agree, or you could lose full-quality copies. Remember that photos may then end up in iCloud Backup instead (step 4).
3. **Turn on Advanced Data Protection if it's available to you.** Go to Settings → [your name] → iCloud → Advanced Data Protection → Turn On Advanced Data Protection. Your Apple Account needs two-factor authentication, and every device signed in to it needs up-to-date software. Set up a recovery contact or a recovery key when asked. Write the recovery key down and store it somewhere safe and offline, because Apple can't recover it for you.
4. **Check what's in iCloud Backup.** Go to Settings → [your name] → iCloud → iCloud Backup and look at what this iPhone backs up. Without Advanced Data Protection, Apple holds the keys to this backup.
5. **Keep sensitive photos out of Shared Albums.** Open Photos, check your Shared Albums and remove anything private, since they aren't end-to-end encrypted even with Advanced Data Protection.
6. **Lock the Hidden album on the device.** Go to Settings → Apps → Photos (iOS 17: Settings → Photos) and make sure "Use Face ID" (or Touch ID or Passcode) is on. While you're there, you can turn off "Show Hidden Album" so the album doesn't appear in Photos at all.
7. **Turn off Enhanced Visual Search if you prefer.** In the same Photos settings screen, scroll down and switch off Enhanced Visual Search (iOS 18 and later).

For a step-by-step guide to the Hidden album itself, see [how to hide photos on iPhone](/guides/hide-photos-iphone).

## Where the built-in options stop

The built-in tools go a long way, especially with Advanced Data Protection. But they leave some gaps:

- **Advanced Data Protection is all or nothing for your account.** You can't make just your private photos end-to-end encrypted. It changes recovery for your whole iCloud account, and it isn't available in every country.
- **Anyone with your passcode gets everything.** The Hidden album opens with your device passcode. Someone who knows it, such as a partner, a family member or someone who watched you type it, can open the album and see every hidden photo.
- **Hidden photos are still in the main library.** They're mixed in with everything else, they sync to every device on your Apple Account, and they're easy to un-hide by accident.
- **Shared Albums and sent copies are outside its reach.**

If you want certain photos and documents protected separately, with their own lock and an iCloud backup Apple can't read whatever your iCloud settings are, the next step is an encrypted vault. There's a longer explanation in [iPhone Hidden album vs an encrypted photo vault](/blog/iphone-hidden-album-vs-encrypted-vault).

## The stronger way: an encrypted vault with its own keys

An encrypted vault app encrypts files on your iPhone with keys that only you control, before anything is backed up. If the app works this way, Apple stores the backup without being able to read it, even if you never turn on Advanced Data Protection.

VaultCave is one example. It works like this:

- **On the device:** each vault is encrypted with AES-256-GCM. The keys come from your own pattern or passcode and are bound to a device secret in the Secure Enclave. File names, thumbnails, folders and the index are encrypted as well. There's no VaultCave account and no VaultCave server holding your files.
- **In iCloud:** the optional backup goes to your own iCloud (the CloudKit private database). It's encrypted before upload, uses random record names and pads file sizes. Apple can't read it, and neither can VaultCave. Someone with access to your iCloud account could delete the backup but not open it. The backup uses your iCloud storage, and the app tells you when a vault isn't backed up because iCloud is full.
- **Not just photos:** videos, PDFs, scans of your passport or ID, and medical records go in the same vault. Documents open inside the vault, so they don't need to sit in Files or Photos.
- **No Face ID, by design:** each vault opens with its own pattern or passcode, not your device passcode, so knowing your iPhone passcode doesn't open it.

To set it up:

1. Install VaultCave (iOS 17 or later) and create a vault with a pattern (at least 6 dots on a 5×5 grid) or a passcode (at least 6 characters).
2. Write down the 12-word recovery phrase when it's shown. You'll type back 3 of the words to confirm. It's the only way to restore a backup or open the vault without your pattern, and VaultCave can't reset it. See [how to store a recovery phrase safely](/blog/recovery-phrase-how-to-store-it).
3. Leave the encrypted iCloud backup on (it's on by default at setup), or turn it off if you'd rather keep everything on the device only.
4. Import from Photos. You can choose to delete the originals once the encrypted copy is verified. Then go to Photos → Recently Deleted and empty it, so the originals don't stay in your library, or in iCloud Photos, for another 30 days.

VaultCave has honest limits too. It can't block screenshots or someone pointing a camera at your screen. Anyone who watches you unlock can open that vault. If you export a file, the copy is readable again. If you forget both the pattern and the recovery phrase, the vault is gone for good. VaultCave hasn't had an independent security audit yet; the model is documented on the [security page](/security). The free version holds one vault with up to 100 items. More vaults and unlimited items are Pro features.

## Comparison: who can read your photos where

| Where the photo is | Can Apple decrypt it? | Notes |
|---|---|---|
| On your iPhone (any album, Hidden included) | Apple doesn't view your library on the device | Protected by your device passcode. Anyone with the passcode can open the Hidden album |
| iCloud Photos, standard data protection | Yes, Apple holds the keys | Hidden photos are treated like all the others |
| iCloud Photos, Advanced Data Protection | No, keys stay on your devices | Some metadata isn't end-to-end encrypted. Not offered in every country |
| iCloud Backup, standard data protection | Yes | Includes photos when iCloud Photos is off |
| iCloud Backup, Advanced Data Protection | No | You're responsible for your own recovery |
| Shared Albums | Yes | Not covered by Advanced Data Protection |
| VaultCave vault and its iCloud backup | No | Encrypted on the device before upload, whatever your iCloud settings. Recovery phrase needed to restore |

## Mistakes to avoid

- **Treating Hidden as encrypted.** Hiding a photo changes where it appears, not who holds the keys.
- **Turning on Advanced Data Protection without a recovery plan.** Without a recovery contact or a safely stored recovery key, losing your devices could mean losing your iCloud data.
- **Forgetting Shared Albums.** A private photo in a Shared Album stays under standard protection.
- **Deleting originals but not Recently Deleted.** Photos stay in Recently Deleted for about 30 days. If iCloud Photos is on, they stay in iCloud for that time as well. See [how to permanently delete photos on iPhone](/guides/permanently-delete-photos-iphone).
- **Exporting from a vault back into Photos.** An exported copy is an ordinary photo again and syncs to iCloud like any other.
- **Keeping the vault's recovery phrase on the same phone.** If the phone is lost, the phrase goes with it. Store it offline.

## The short version

- Hiding a photo doesn't change who can read it. Hidden photos sync and are encrypted exactly like the rest of your library.
- On the iPhone itself, Apple doesn't look through your photos. In iCloud with standard data protection, Apple holds the keys.
- Advanced Data Protection makes iCloud Photos and iCloud Backup end-to-end encrypted, but not Shared Albums, and it isn't offered everywhere.
- Lock the Hidden album with Face ID, and keep private photos out of Shared Albums.
- For photos and documents you want protected separately, an encrypted vault like VaultCave keeps its own keys, so its iCloud backup stays unreadable to Apple.

## FAQ

### Can Apple employees look at my iCloud photos?

With standard data protection, Apple holds the keys to your iCloud Photos, so access is technically possible and is governed by Apple's own policies and by legal process. With Advanced Data Protection turned on, Apple says it doesn't hold the keys to iCloud Photos, so it can't decrypt them, whether they're hidden or not.

### Can police get my hidden photos from Apple?

Apple responds to valid legal requests with data it is able to provide. With standard data protection, that can include iCloud Photos and iCloud Backup, hidden photos included. With Advanced Data Protection, Apple says it doesn't have the keys for those categories. This is general information, not legal advice. If you're worried about a specific case, talk to a lawyer.

### If I delete a hidden photo, is it gone from Apple's servers?

Not straight away. A deleted photo goes to Recently Deleted for about 30 days. If iCloud Photos is on, deleting it there removes it from iCloud and from your other devices too. It may still be in older iCloud or computer backups. Empty Recently Deleted yourself if you want it gone sooner.

### Does Advanced Data Protection stop me using iCloud.com?

By default, yes. With Advanced Data Protection on, your data isn't viewable on iCloud.com. You can turn on 'Access iCloud Data on the Web' in your iCloud settings. While you have that open, your browser gets temporary access to the keys for the data you view.

### Is the Hidden album encrypted?

Only as much as the rest of your library. On the iPhone, every photo is protected by iOS Data Protection, which is tied to your passcode. In iCloud, hidden photos get the same protection as the rest of iCloud Photos. Hiding a photo moves it out of the main views and puts a Face ID lock on the album. It doesn't add encryption of its own.