iCloud Shared Photo Library: Why Hidden Photos Aren't Actually Private

What iCloud Shared Photo Library actually is

That single sentence overturns the assumption most people bring to the word "hide." In a personal, non-shared library, hiding a photo removes it from your main grid and tucks it into a Hidden album that only you can unlock. In a Shared Photo Library, hiding does something different: it moves the photo to a Hidden album that every participant in that library can open, and any one of them can tap "Unhide" to bring it right back into view.

iCloud Shared Photo Library lets you and up to five other people (family members or friends) pool photos and videos into one collaborative collection, viewable across iPhone, iPad, Mac, Apple TV, PC, and iCloud.com (Apple Support). Every participant needs their own Apple ID and needs iCloud Photos turned on. It's designed so a couple or a family doesn't end up with five separate, disconnected camera rolls of the same vacation or the same kid's birthday.

The feature works exactly as intended for its actual purpose: shared visibility. The confusion comes from applying a personal-privacy verb, "hide," to a shared, multi-person space. Hiding in a shared library is closer to moving a photo to a different shared folder than it is to making something private to you alone.

How the Hidden album lock works, and why it doesn't help here

Since iOS 16, the Hidden album has been locked by default and requires Face ID, Touch ID, or your device passcode to open (Apple Support). That lock is a genuinely useful privacy improvement, but it protects the album from someone who picks up your unlocked phone. It does nothing to prevent access from a legitimate participant in the Shared Photo Library, because that person unlocks the Hidden album with their own Face ID, on their own device, and sees the exact same shared hidden content you do.

In other words, the lock icon on the Hidden album answers the question "can a stranger holding my phone see this?" It does not answer "can the other people I share this library with see this?" Those are two different threat models, and Apple's hide feature in a shared library only solves the first one.

What this means in practice

A few scenarios where this gap actually bites people:

If your goal is to keep something in a shared library away from the other participants entirely, hiding is not the mechanism for that. The only way to keep a photo fully outside a Shared Photo Library's visibility is to not add it to that shared library in the first place, or to remove it from the shared library (which is different from hiding it within the library).

• You hide a photo from a group trip because it's unflattering, assuming only you can see it, then a co-participant opens their own Hidden album and unhides it for everyone.
• A couple shares a library, one person hides a gift-related or surprise photo intending to keep a secret, and the other person's device shows the same Hidden album with the same photo in it.
• Parents managing a family shared library assume hiding a photo removes it from a child's device too. It doesn't remove it; it just relocates it to a Hidden album the child can also open and unhide.

A private alternative for photos you don't want anyone else to see

Because Apple's Hidden album is a shared, unlockable space when it lives inside a Shared Photo Library, it isn't the right tool for photos you want to keep from every other participant, not just from someone who grabs your unlocked phone. For that level of privacy, the photo needs to live somewhere outside the shared library's reach entirely.

That's the specific gap Secure Folder: Incogni Vault is built for. Secure Folder moves photos, videos, documents, and notes out of the Photos app entirely into a separate vault locked behind its own PIN or Face ID, a PIN that's independent of your shared library and never visible to other participants. Because the content never re-enters the Photos app or iCloud Photos, it can't be swept into a Shared Photo Library or surfaced in anyone else's Hidden album. Everything stored in Secure Folder stays on the device; the app doesn't upload vault content anywhere, so there's no shared account or shared album for another participant to open.