How to store intimate photos safely on iPhone

Plenty of adults take intimate photos, of themselves or with a partner who's happy to be in them. Wanting to keep them private is reasonable, and the iPhone's default settings don't make that easy. This guide covers how to store intimate photos safely on iPhone: what the camera roll exposes, what the Hidden album does and doesn't do, how an encrypted vault helps, and what to do if images are ever leaked or used against you.

Why the camera roll is a risky place for intimate photos

The Photos app is designed to share and resurface your pictures. That's great for holidays and awkward for anything private:

• iCloud sync. With iCloud Photos on, every photo goes to every device signed in to your Apple account: an old iPad, a family Mac, a work laptop.
• Shared Library. If you use iCloud Shared Photo Library, the Camera app can send new photos straight into it, where every participant sees them. Check the Shared Library button in the Camera app before you take a private photo, or turn off Sharing from Camera in Settings → Apps → Photos → Shared Library.
• Shared albums. Picking the wrong album when sharing sends a photo to everyone subscribed.
• Memories, featured photos and widgets. Photos picks pictures to show on your home screen and in slideshows. Our guide to hiding photos from Memories, widgets and search covers how to stop that.
• Apps with full photo access. Any app you've given access to your whole library can read what's in it. Review this in Settings → Privacy & Security → Photos.
• Lending your phone. Handing your phone over to show one picture is a moment where a swipe goes too far.

The built-in way: hide and lock

If you want to stay inside Photos, this is the minimum:

1. Open the photo, tap the More button (⋯) and choose Hide. It leaves your library, Memories and widgets.
2. Check the Hidden album is locked: go to Settings → Apps → Photos and make sure Use Face ID (or Touch ID or Passcode) is on. This has been available since iOS 16. On iOS 17, the path is Settings → Photos.
3. In the same screen, turn off Show Hidden Album if you don't want the album listed under Utilities at all.
4. If you use a Shared Library, make sure the photo is in your Personal Library, not the shared one.
5. Delete any copies you no longer need, then empty Recently Deleted.

Where the Hidden album stops

The Hidden album protects against a glance, not against someone determined:

• It opens with your iPhone's unlock. Anyone who knows your passcode, or who can hold your phone up to your face, can open it.
• It still syncs. Hidden photos travel with your iCloud library to your other devices.
• It's the first place people look. Anyone searching an iPhone for private photos knows where the Hidden album is.
• The photos were in your camera roll first. Until you hide them, they're in your library like everything else, which is when Shared Library, Memories and backups can pick them up.

For a full breakdown, see Hidden album vs an encrypted vault.

The stronger way: an encrypted vault with its own key

An encrypted vault keeps photos in separate, encrypted storage, behind a key that isn't your phone's passcode. Someone who knows your iPhone code still can't open it, the photos aren't part of your library, and nothing appears in Memories, search or shared albums.

The best habit is to never put intimate photos in the camera roll in the first place. A vault with its own camera lets you take the picture straight into encrypted storage.

With VaultCave, as one example:

1. Create a vault and set a pattern or passcode that's different from your iPhone passcode, and that you don't use anywhere else.
2. Write down the 12-word recovery phrase and keep it somewhere private and offline. Nobody, including VaultCave, can reset it for you.
3. Use the built-in camera for new photos. They're captured into the vault and never saved to the camera roll.
4. For photos you already have, tap + and import them from Photos, with the option to delete the originals once the encrypted copy is verified. Then empty Recently Deleted.
5. If you want, keep the encrypted backup to your own iCloud on. It's encrypted before upload, Apple and VaultCave can't read it, and only your recovery phrase restores it.

Files, names and thumbnails are encrypted with AES-256; the details are on our security page. Vaults are never listed on the unlock screen, and with Pro you can keep more than one hidden vault, each with its own pattern.

Honest limits: a vault can't stop a screenshot or someone photographing your screen, someone who watches you draw your pattern can open that vault, and once you export or send a photo, that copy is readable by whoever has it.

Comparing your options

	Camera roll	Hidden album	Encrypted vault
Separate key from your iPhone passcode	No	No	Yes
Out of Memories, widgets and search	No	Yes	Yes
Can't land in a Shared Library or shared album by accident	No	Not once hidden	Yes
Readable by apps with full photo access	Yes	Library access applies	No
Capture without touching the camera roll	No	No	Yes, with a built-in camera
Recover if you forget the code	Through your Apple account	Through your Apple account	Only with your recovery phrase

Consent when someone else is in the photo

If a photo shows another person, they have a stake in it too. Keep intimate images of someone else only if they're an adult and agreed to you having them. If they ask you to delete them, or the relationship ends and you're not sure they'd still want you to keep them, deleting is the respectful choice. Never share them with anyone. Sharing intimate images without consent is a crime in many countries and US states, and it causes real harm. Photos from a past relationship are covered in more detail in photos from a past relationship.

And never keep sexual images of anyone under 18, even if they sent them willingly or are close to your age. It's illegal almost everywhere.

If images leak or someone threatens to share them

This is frightening, and it isn't your fault. Some steps that help:

1. Don't pay and don't send more. With threats to share images unless you pay or send more (often called sextortion), paying rarely ends it. Stop replying.
2. Keep evidence. Screenshot the threats, the profile, usernames and links, with dates. Don't delete the conversation yet.
3. Use a hashing service. StopNCII.org is for images taken when you were 18 or older. It creates a digital fingerprint of the image on your device, without uploading the image itself, and participating platforms use it to detect and block copies. If you were under 18 when the image was taken, use Take It Down from NCMEC (takeitdown.ncmec.org), which works the same way.
4. Report to platforms. Most social networks, chat apps and search engines have a dedicated form for non-consensual intimate images.
5. Contact the police. In many places this is a crime. A local victim support service, or a helpline such as the Revenge Porn Helpline in the UK or the Cyber Civil Rights Initiative in the US, can help you through it.
6. Secure your accounts. Change your Apple account password, review the devices signed in to it, and check who has your iPhone passcode.

If the threat comes from a current or former partner who controls or monitors you, be careful: sudden changes on a phone they watch can be noticed. A vault can't make an unsafe situation safe. A local domestic violence hotline can help you plan.

Mistakes to avoid

• Taking the photo with the normal Camera app while a Shared Library is set to share automatically. Check before you shoot, or use a vault's camera.
• Hiding a photo and assuming it's encrypted. Hidden is out of sight, not out of reach.
• Using your iPhone passcode as your vault code. Then anyone with one has both.
• Forgetting Recently Deleted. Deleted photos stay there for up to 30 days. Open Albums → Recently Deleted and delete them there.
• Forgetting where copies went. A photo you sent in a chat is stored on the other person's phone and, depending on the app, in their backups.

The short version

• The camera roll syncs, shares and resurfaces photos; it's the wrong place for intimate pictures.
• The Hidden album hides photos behind your phone's unlock, but they stay in your library and sync.
• An encrypted vault with its own key, plus a camera that never saves to the camera roll, keeps them separate.
• Only keep images of another person if they're an adult and agreed, and never share them.
• If images leak or you're threatened, don't pay, keep evidence, and use StopNCII.org (or Take It Down if you were under 18).