How to choose a secure photo vault app
Every photo vault says it’s secure. Some lock a folder behind a PIN, some genuinely encrypt every file. Here is a 10-point checklist to tell them apart before you trust one with your photos.
Searching for a photo vault turns up hundreds of apps with near-identical promises: military-grade encryption, hidden photos, total privacy. The words are cheap. What matters is how the app is built, and most of it can be checked from the app’s own pages.
Hiding is not the same as encrypting
The first thing to understand is the difference between an app that hides photos and one that encrypts them.
- Hiding moves photos out of your gallery and puts a lock screen in front of them. The files themselves may be stored as normal images that anyone with access to the phone’s storage, a computer backup or a forensic tool could read.
- Encrypting turns each file into unreadable data that can only be turned back into a photo with a key. Without the key, a copied file is noise.
A good vault encrypts. A lock screen on its own is a curtain, not a safe.
The 10-point checklist
1. Files are encrypted on the device
Look for a specific algorithm, such as AES-256, and the words "on device" or "end to end". Vague phrases like "bank-level security" with no detail are a warning sign.
2. The key comes from you, not a server
The strongest vaults derive the encryption key from your passcode or pattern on the phone itself, using a slow, memory-hard function like Argon2id or scrypt. That makes guessing expensive. If the app checks your PIN against a server, the company holds the real keys.
3. Copied files are useless elsewhere
Even good passcodes are short. A well-built app mixes your passcode with a secret stored in the phone’s secure hardware, so files copied off the device can’t be attacked on a fast computer.
4. Recovery doesn’t go through the company
If the app can email you a reset link, the company (or anyone in your inbox) can get in. A recovery phrase that only you hold is safer. The cost: lose it and the passcode, and the photos are gone.
5. No account required
Every account is an identity tied to your vault and a password database that could leak. Read our guide to private photo apps without an account.
6. Backups are encrypted before they leave
A vault you can’t back up is a vault you will eventually lose. But a backup is only as private as its encryption. The cloud should receive data it can’t read, and you should be able to restore it on a new phone.
7. Screenshots and the app switcher are covered
Your phone’s app switcher shows a snapshot of the last screen. A careful vault covers it and blocks screenshots and screen recordings while it’s open.
8. It can protect you when you’re forced to open it
Most threats aren’t hackers. They are people who know your passcode or make you unlock your phone. Features that help here: a duress pattern or decoy vault, hidden vaults that don’t show up in a list, and a break-in log of wrong attempts.
9. No ads, analytics or trackers
Ad and analytics code runs inside the app that holds your most private photos. Check the App Privacy section on the App Store or Data safety on Google Play. "Data not collected" is what you want to see.
10. You can leave
Can you export your photos, or move the vault to a different phone or platform? An app that traps your data makes switching phones risky. See how to move a vault from iPhone to Android.
Red flags
- A free app full of ads asking for broad permissions.
- No mention of encryption, or only marketing words for it.
- "Forgot PIN? We’ll email you." on a vault app.
- Reviews mentioning photos lost after reinstalling or changing phones.
- A disguise as the main security feature. A fake calculator icon hides the app, not the photos. See our calculator vault comparison.
How Umbra scores
We built Umbra against this list, so it’s only fair to show our working.
| Checklist | Umbra |
|---|---|
| On-device encryption | Yes, AES-256-GCM with a separate key for every file |
| Key from you | Yes, your pattern is stretched with Argon2id on the phone |
| Copied files useless | Yes, mixed with a secret that never leaves the phone |
| Recovery without the company | Yes, a 12-word phrase or one you choose |
| No account | Yes, no email, phone number or login |
| Encrypted backups | Yes, iCloud on iPhone and iPad, and exportable backup files everywhere |
| Screenshots and app switcher | Yes, screenshots and recordings come out black |
| Protection when forced | Yes, hidden vaults and break-in log free, duress pattern with Pro |
| No trackers | Yes, no analytics or ads |
| You can leave | Yes, backups move between iPhone, iPad and Android |
The free plan covers 3 vaults, 100 photos and 10 videos, with unlimited notes and documents. Pro is $14.99 a year after a 7-day trial, $1.99 a week, or $39.99 once.
Questions
Are photo vault apps actually secure?
Some are and some aren’t. The ones that encrypt every file on the device, derive the key from your passcode and keep no copy of it are genuinely hard to break into. Apps that only hide files behind a lock screen are not, even if they look the same.
Is the iPhone Hidden album secure enough?
It keeps photos out of your main library and asks for Face ID or your passcode, which is fine against a quick glance. Anyone who knows your phone’s passcode can open it. Read how to hide photos on iPhone for the options.
What is the most secure way to store private photos on a phone?
An app that encrypts files on the device with a key derived from a strong passcode you don’t use anywhere else, with an encrypted backup you can restore with a recovery phrase. Add a duress pattern if you’re worried about being forced to unlock it.
Should I pay for a photo vault app?
A free app has to make money somehow, often through ads or data. Paying for a privacy app aligns the company with you. Umbra’s free plan has no ads and the same encryption as Pro.