iPhone Hidden album vs Hushkeeper

At a glance

How the Hidden album actually works

When you tap Hide on a photo, iOS removes it from your Library, your other albums and the Photos widget and moves it to the Hidden album. Since iOS 16 that album is locked by default and opens with Face ID or Touch ID, falling back to your passcode. You can also turn the album off entirely in the Photos settings so it doesn't appear in the app at all.

Two details matter more than people expect:

• The lock is your phone lock. There is no separate password. Anyone who knows your passcode — a partner, a child, someone who watched you type it — can open the Hidden album the same way you do.
• It syncs. If you use iCloud Photos, a photo hidden on your iPhone is hidden on every device signed in to the same Apple ID, and opens there with that device's own lock. A family iPad or an old Mac you still share can be a side door.

Where the files live

Everything on a locked iPhone is protected by iOS device encryption, and that is good protection against a stranger who finds your phone. The difference shows up after the phone is unlocked and in the cloud. Hidden photos are ordinary photos in your library once the device is open. In iCloud, Photos is end-to-end encrypted only if you have switched on Advanced Data Protection, which is opt-in; with standard protection Apple holds the keys for that data.

Hushkeeper takes a different approach: it derives a key from your pattern, uses it to unlock a random 256-bit master key, and seals every file, thumbnail and file name with AES-256-GCM before anything is written to disk or sent to your iCloud. What leaves the phone is ciphertext either way, whatever your iCloud settings are.

When the Hidden album is the better choice

• You just want a few photos out of the camera roll when you hand your phone to someone to show them pictures.
• Nobody else knows your passcode and you don't share an Apple ID or devices.
• You want zero setup and nothing to pay for.

When an encrypted vault is the better choice

• Someone close to you knows, or could learn, your passcode.
• You share an iPad or Mac on the same Apple ID.
• You want to keep documents too: ID scans, contracts, medical letters.
• You need to be able to say there's nothing there — hidden vaults and a duress pattern exist for that.

Can you use both?

Yes. A lot of people keep everyday "don't scroll past this" photos in the Hidden album and move the few things that would really hurt if seen into an encrypted vault. If you move something into Hushkeeper, delete it from Photos afterwards and empty Recently Deleted, otherwise a copy stays there for up to 30 days.

Sources

• Apple Support: Hide photos with the Hidden album
• Apple Support: iCloud data security overview (Advanced Data Protection)