An iPhone Hidden album guarded by a glowing teal Face ID icon, with a passcode key quietly slipping past the lock to show the photos are gated by visibility, not encryption

Can You Make iPhone Hidden Photos Face ID Only?

Many people want the Hidden album to open for their face and nothing else. iPhone does not offer that. Here is how the lock works, how to turn it off or get past it with your passcode, and what it does not protect.

No. Photos has no setting that makes the Hidden album accept Face ID alone. Apple says you unlock the Hidden and Recently Deleted collections with Face ID, Touch ID, or your passcode, so anyone who knows your iPhone passcode can open Hidden. You can turn the lock off or hide the album from view, but you cannot remove the passcode option.

For protection beyond Face ID: Vaultaire

Vaultaire encrypts imported files with AES-256-GCM under a random master key instead of relying on the Hidden album prompt. A drawn pattern derives the separate vault key that authenticates the encrypted index and unwraps the master key. No identity account is required. An examiner with the app's files can still see the app data and estimate how many vaults hold files, and the encrypted CloudKit backup (on by default, can be turned off), sync and sharing, and iOS device backups remain separate copy paths. Free for up to 3 vaults.

How to turn Face ID off for the Hidden album

Open Settings, tap Apps, then tap Photos, and turn off Use Face ID. On an iPhone with Touch ID the switch is called Use Touch ID, and on an iPhone with neither it is called Use Passcode. The same switch covers Hidden and Recently Deleted, so turning it off opens both without a check. There is no way to lock one and not the other.

The same Photos settings screen has a Show Hidden Album switch. Turn it off and the Hidden collection disappears from the Photos app, though the photos stay hidden and stay on the phone. Turn it back on to see the album again. If you cannot find Hidden at all, our guide to where the Hidden album lives in Photos walks through it.

How to view Hidden photos without Face ID

Open Photos, tap Hidden under Utilities, and let Face ID fail or look away. The iPhone then offers your passcode, and entering it opens the album. This also works when Face ID stops recognizing you, for example with a mask or sunglasses, or after you reset Face ID.

To view the album on a Mac, open Photos, choose View, then Show Hidden Photo Album, and confirm with Touch ID or your Mac login password. Our guide to showing hidden photos on a Mac covers that path and what to do when the album does not appear.

Why there is no Face-ID-only mode

Face ID on iPhone always depends on the device passcode. Apple's security guide says the iPhone asks for the passcode in some cases even when Face ID is on, for example after a restart or after five failed Face ID matches. A Face-ID-only Hidden album would lock you out of your own photos at those moments, and Apple does not offer one.

The same design means you cannot give the Hidden album its own password. It uses your iPhone passcode, so changing the Hidden album code means changing the passcode for the whole phone. Our guide on changing the Hidden album password covers what that changes and what it does not.

Can the Hidden album Face ID lock be bypassed?

Yes, because the lock decides whether the album is shown and does nothing to the photos themselves. The images stay stored as ordinary files, like the rest of your library. Anyone who knows your passcode can open the album or turn the lock off in Settings > Apps > Photos. A partner, family member, or anyone who has watched you type your code can do this in seconds.

The second route skips the Photos app entirely. Connect the iPhone to a computer it already trusts, and a Mac or PC can import the hidden photos like any other picture, because they are not encrypted. The Face ID prompt only exists inside the Photos app, so tools that read the phone's storage from outside never see it. The Hidden album is a curtain for a casual glance, not a safe.

The fix that actually holds

When a photo has to stay private even from someone holding your unlocked phone, the answer is encryption, not hiding. An encrypted vault stores each photo as scrambled data that is unreadable without your key, so a passcode does not help an attacker, and a cable shows nothing but noise. The photo is protected by math, not by being tucked out of view.

Vaultaire is built for this. You draw a pattern on a five by five grid, and PBKDF2 derives the vault key that authenticates the encrypted index and unwraps its random AES-256 master key. Move the sensitive photos in and accept Vaultaire's offer to delete the originals from Photos. They go to Recently Deleted, so empty it too. There is no identity account, and the only app-managed CloudKit copies are the encrypted iCloud backup, which is on by default and can be turned off, plus sync or sharing if you use them. System device backups may still include encrypted local files. Someone holding an unlocked phone still needs an authenticated vault or recovery flow to obtain the keys, which is a stronger boundary than the Hidden album provides.

Related reading:

Sources

Frequently asked questions

Can I make the Hidden album open with Face ID only?

No. Apple says you unlock the Hidden and Recently Deleted collections with Face ID, Touch ID, or your passcode, and Photos has no setting that removes the passcode option. Anyone who knows your iPhone passcode can open the Hidden album.

How do I open Hidden photos without Face ID?

Enter your iPhone passcode when Face ID does not recognize you, and the Hidden album opens. To skip the check every time, go to Settings > Apps > Photos and turn off Use Face ID. That also removes the check from Recently Deleted.

Can I set a different password for the Hidden album?

No. The Hidden album uses your iPhone's own Face ID, Touch ID, and passcode. Photos has no separate password for one album, so changing the Hidden album code means changing your iPhone passcode, which changes it for the whole phone.

Can the Hidden album Face ID lock be bypassed?

Yes. Anyone with your passcode can open the album or turn the lock off in Settings > Apps > Photos. A computer your iPhone trusts can import hidden photos over a cable, because the lock only exists inside the Photos app and does not encrypt the files.

How do I make hidden photos truly private?

Use encryption instead of hiding. Vaultaire protects file contents with AES-256-GCM under a random master key and uses a drawn pattern to derive the vault key. A copied, locked app container contains ciphertext, while a compromised device or open vault remains inside the threat model. After the import, Vaultaire offers to delete the Photos originals. Accept it once the import looks right, then empty Recently Deleted.

Save this guide

Can You Make iPhone Hidden Photos Face ID Only? — illustrated Vaultaire guide card Download this guide as an image