How to Create a Secret Folder on iPhone in 2026

Three methods compared. Only one actually encrypts the files.

You can create a secret folder on iPhone using three methods: the built-in Hidden Album (iOS 16+, locked behind Face ID), an iOS Shortcuts automation that moves files to an obfuscated location, or a zero-knowledge vault app like Vaultaire that encrypts files with AES-256-GCM so they are mathematically inaccessible without the correct pattern. This guide covers all three, with the tradeoffs that matter.

"Secret" vs "Hidden" vs "Encrypted": What Each Actually Means

These three terms describe different levels of protection, but most guides use them interchangeably. They are not the same thing.

The iOS Hidden Album is hidden but not secret. It appears under a clearly labeled "Hidden" section in Photos. It is not encrypted. The photos are stored in their original format on disk and are readable through a Mac connection, an iTunes backup, or forensic extraction tools.

A genuinely secret folder requires that (a) the folder's existence is not discoverable and (b) its contents are protected by something stronger than visibility settings.

Method 1: Use the Built-in Hidden Album (iOS 16+)

The Hidden Album in iOS 16 and later requires Face ID or Touch ID to view, which is an improvement over earlier versions where anyone with the phone could open it. Here is how to use it.

Step 1: Select the Photos You Want to Hide

Open the Photos app. Tap Select in the upper right. Tap each photo or video you want to move. Selected items show a blue checkmark.

Step 2: Tap the Share Button and Choose "Hide"

With your photos selected, tap the share icon (square with upward arrow) in the bottom left. Scroll down in the share sheet and tap Hide. Confirm by tapping Hide [N] Photos.

Step 3: Verify the Photos Moved to the Hidden Album

Open the Albums tab. Scroll to the bottom under Utilities. Tap Hidden. Authenticate with Face ID or Touch ID. Your photos should appear here.

Step 4: Disable Hidden Album Visibility (Optional)

Go to Settings > Photos and toggle off Show Hidden Album. This removes the Hidden album from the Albums tab entirely. The photos still exist on the device. This just hides the album from view. Anyone who knows this setting exists can toggle it back on in seconds.

What the Hidden Album Does Not Do

• It does not encrypt photos. Files remain in their original JPEG/HEIC format on disk.
• It does not protect against iTunes/Finder backups. Hidden photos appear in unencrypted backups.
• It does not resist forensic tools. Cellebrite, GrayKey, and similar tools read Hidden Album contents directly.
• It does not hide the fact that you have hidden photos. The "Hidden" label is visible in Utilities.

Method 2: Build an iOS Shortcut That Moves Photos to an Obfuscated Location

This method uses the Shortcuts app to move photos into the Files app under a folder name that does not draw attention. Almost no guide covers this because it requires familiarity with iOS Shortcuts. It provides obscurity, not encryption.

Step 1: Create the Destination Folder

Open the Files app. Navigate to On My iPhone. Tap the three-dot menu and select New Folder. Name it something inconspicuous -- com.apple.system.resources or .cache_thumbnails are examples that look like system files. iOS does not prevent you from using dot-prefixed names.

Step 2: Create the Shortcut

Open the Shortcuts app. Tap the + button to create a new shortcut. Add these actions in order:

1. Select Photos -- set to "Select Multiple"
2. Save File -- destination: the folder you created in Step 1. Enable "Ask Where to Save" if you want to choose each time, or hardcode the path.

Name the shortcut something neutral like "Organize" or "Cleanup."

Step 3: Run the Shortcut and Delete Originals

Run the shortcut from the Shortcuts app or add it to your Home Screen. Select the photos. After they copy to the Files folder, go back to Photos and delete the originals from the Recently Deleted album (they persist there for 30 days).

Limitations of the Shortcut Method

• No encryption. Files are stored in plaintext in the Files app.
• Discoverable. Anyone who browses On My iPhone in the Files app can find the folder.
• No authentication. The folder has no password or biometric lock.
• Backup exposure. Files in On My iPhone are included in iCloud and iTunes backups.

The Shortcut method is better than nothing for casual privacy. It is not suitable for protecting files from someone with physical access to your device for more than a few minutes.

Method 3: Use an Encrypted Vault App

An encrypted vault app stores files inside AES-256-GCM encrypted containers where the data is mathematically inaccessible without the correct key. This is the only method that protects against forensic tools, device backups, and physical access.

Vaultaire uses a pattern drawn on a 5x5 grid of 25 dots as the encryption key input. The pattern feeds into PBKDF2 with HMAC-SHA512 and a per-vault cryptographic salt to derive a 256-bit AES key. Each file receives a unique initialization vector. The pattern is never stored on the device.

How It Works

1. Draw a pattern on the 5x5 grid. Every unique pattern opens a different vault.
2. Import photos, videos, or documents using the share sheet or built-in camera.
3. Files are encrypted at the moment of import. No unencrypted copy exists on disk.
4. Close the app. The encryption key is wiped from memory automatically.

What Makes This Different

• No vault registry. There is no database listing how many vaults exist. The app itself cannot enumerate them. A forensic examiner cannot prove additional vaults exist.
• Wrong pattern shows nothing. An incorrect pattern does not produce an error. It derives a different key that decrypts to noise. "Nothing here" and "wrong pattern" look identical.
• Duress mode. One vault can be designated as a duress trigger. Drawing that pattern opens it normally while permanently destroying the cryptographic salts of all other vaults in under one second. No visual indicator. No log entry.

See the full security architecture and pattern encryption explanation.

Switching from Samsung Secure Folder?

If you recently moved from a Samsung Galaxy to iPhone, you are probably looking for the equivalent of Samsung Secure Folder. It does not exist as a native feature on iOS. Here is how the options compare.

Samsung Secure Folder's main advantage is its separate app space: you can run a second copy of apps like WhatsApp inside the Secure Folder. iOS has no equivalent. For file storage and photo protection specifically, Vaultaire provides stronger encryption and adds plausible deniability that Samsung Secure Folder does not offer.

If you need to migrate files from Samsung Secure Folder before switching phones: open Secure Folder on your Galaxy, move files out to regular storage, transfer to iPhone via Apple's Move to iOS app or direct file transfer, then import into Vaultaire.

Comparison: All Three Methods Side by Side

Tips and Common Mistakes

1. Do not rely on the Hidden Album for sensitive content. It was designed for organizing your photo library, not for security. Apple's own documentation calls it a visibility feature, not a protection feature.

2. Delete originals from Recently Deleted. When you move photos to any secret location, the originals sit in the Recently Deleted album for 30 days. If you skip this step, the photos remain accessible.

3. Do not use a calculator-style vault app. Apps that disguise themselves as calculators often use access-control PINs without actual encryption. The disguise provides obscurity but no cryptographic protection. A forensic tool reads the stored files directly. Read more in our best photo vault apps guide and our head-to-head vault app comparisons.

4. Check whether your vault app actually encrypts. If a vault app has a "forgot password" flow that works without a recovery phrase, the files are probably not encrypted. The server or app can regenerate access, which means the encryption key is stored somewhere retrievable.

5. Consider your threat model. If you want to keep photos from a nosy friend, the Hidden Album works. If you want to protect files from a forensic examiner, a stolen device, or a compelled unlock at a border crossing, you need encryption with plausible deniability.

6. Back up your vault separately. Encrypted vault apps store data independently from iCloud Photos. If you lose your phone and only have an iCloud Photos backup, your vault contents are not included unless the vault app has its own encrypted backup system. Vaultaire offers encrypted iCloud backup where even Apple cannot read the backup data.

Frequently Asked Questions

Can someone find my secret folder on iPhone?

It depends on the method. The iOS Hidden Album is discoverable by anyone who opens Settings > Photos and toggles the visibility setting. A folder in the Files app with an obscure name can be found by browsing. An encrypted vault app like Vaultaire stores files as encrypted data blocks with no folder structure, no file names, and no vault index. There is nothing to find even with full file-system access.

Is the iPhone Hidden Album actually encrypted?

No. The Hidden Album uses access control (Face ID/Touch ID) to restrict viewing within the Photos app. The underlying files remain in their original format on disk. They are accessible through Mac file browsing, iTunes backups, and forensic extraction tools. For actual encryption, you need a vault app that uses AES-256 or equivalent.

What is the most secure way to hide photos on iPhone?

The most secure method is a zero-knowledge encrypted vault app that encrypts each file individually with a unique key. Look for AES-256-GCM encryption, no account requirement, and a design where losing the password means losing the data (which confirms the app cannot bypass its own encryption). See our full guide to hiding photos on iPhone for step-by-step instructions.

Does Samsung Secure Folder work on iPhone?

No. Samsung Secure Folder is exclusive to Samsung Galaxy devices and requires a Samsung account. There is no native iOS equivalent. The closest Apple offers is the Hidden Album (which does not encrypt) and iCloud Keychain (which is for passwords, not files). Third-party vault apps like Vaultaire provide encryption features that go beyond what Samsung Secure Folder offers, including plausible deniability.

Can police access my Hidden Album?

Yes. Law enforcement with physical access to an unlocked iPhone can view the Hidden Album. Forensic tools like Cellebrite can extract Hidden Album contents from locked devices in many cases. More importantly, courts in several jurisdictions have ruled that compelled biometric unlock (forcing you to use Face ID) is legally permissible, unlike compelled password disclosure which is more contested. Pattern-based encryption that is not stored on the device provides a different legal standing than biometric access control.

How many photos can I put in a secret folder?

The Hidden Album has no file limit; it is bounded only by device storage. The iOS Shortcut method is similarly unlimited. Vaultaire's free tier allows up to 5 vaults with 100 files each. The Pro tier ($1.99/month, $9.99/year with a 7-day free trial, or $29.99 lifetime) removes all limits.

Bottom Line

A secret folder on iPhone ranges from "moved out of sight" to "mathematically inaccessible" depending on the method. The Hidden Album hides photos from casual viewing. An iOS Shortcut adds obscurity. An encrypted vault app like Vaultaire adds AES-256-GCM encryption, plausible deniability, and forensic resistance. Pick the method that matches your threat model, and remember that "hidden" and "encrypted" are not the same thing.

Download Vaultaire on the App Store