Comparisons
Locked Notes vs. a Private Notes Vault: Which Actually Protects You?
Mehmet Ali Kısacık · Developer of Secure Folder · August 17, 2026 · 5 min read
Updated September 24, 2026
Key takeaways
- Apple's locked Notes uses end-to-end encryption (PBKDF2-derived key, AES-GCM) tied to your device passcode or a separate Notes password, available since iOS 16.
- Locked notes still sync through iCloud to every device signed into the same Apple Account; removing the lock on one device removes it everywhere.
- You cannot lock a note containing PDF, audio, video, or Office-format attachments, notes synced from non-iCloud accounts, Quick Notes, or notes shared with others.
- A separate vault app like Secure Folder keeps notes outside the iCloud sync chain, behind a PIN independent from your Apple ID and phone passcode.
- Vault content has no cloud sync and stays on your iPhone.
- Secure Folder adds a decoy vault and disguised stealth-mode icons, layers of concealment that Apple's built-in note lock doesn't provide.
If you keep anything sensitive in your iPhone's Notes app, passwords, medical details, financial numbers, a difficult conversation you're drafting, you've probably noticed the little lock icon you can tap on any note. It works. But it's not the only way to keep private text off your Photos app or out of casual view, and it's worth understanding exactly what it protects before you decide it's enough.
How locked notes work
Since iOS 16, Apple lets you lock an individual note in one of two ways: with your device passcode (unlockable by Face ID or Touch ID) or with a separate password created just for Notes (Apple Support). Once locked, the note's contents are end-to-end encrypted, meaning it's encrypted with a key derived from your passcode or Notes password using PBKDF2 and AES-GCM, and only decrypted when you unlock it (Apple).
That's a real, well-engineered protection, but it comes with limits worth knowing before you rely on it:
- You can't lock a note that has a PDF, audio, video, Keynote, Pages, or Numbers attachment.
- You can't lock notes that sync with a non-iCloud account (like Gmail or Exchange), or Quick Notes.
- You can't lock a note that's shared with someone else in iCloud.
- Locked notes still sync across every device signed into the same Apple Account through iCloud, and removing the lock on one device removes it everywhere (Apple Support).
That last point is the practical trade-off. Locking a note doesn't take it out of your Apple ecosystem, it stays tied to iCloud, syncing quietly to your iPad, Mac, and the iCloud website. If someone has your Apple ID password and can reset your Notes password (Apple does support recovery flows for the Notes-specific password), or if a device you're signed into is compromised, the protection depends on how well that whole account is secured, not just the note itself. It's also worth noting that while the note body is encrypted, some metadata around it isn't, so "locked" doesn't mean everything about that note is invisible to Apple's infrastructure (Apple).
What a separate notes vault does differently
A dedicated vault app takes a different approach: instead of locking a note in place inside the Notes app, it moves the content into a completely separate storage space with its own PIN or Face ID, one that isn't part of the Notes/iCloud sync chain at all.
Secure Folder: Privacy Vault, for example, lets you store notes and documents inside its hidden gallery, locked behind a vault PIN that is separate from both your phone's passcode and your Apple ID. There's no cloud sync and the app never uploads what you put in the vault; with no account and no content server, the developer can't see what's stored there.
That separation is the core difference from Apple's approach. Because the vault isn't part of iCloud sync, its contents don't appear on your iPad, your Mac or the iCloud website the way a synced locked note does. Secure Folder uses no iCloud, uploads nothing, and the vault stays on your iPhone.
Secure Folder also adds two things Apple's locked Notes doesn't have. A decoy vault opens a second, separate PIN into what looks like a normal, harmless vault, with no setting or badge anywhere that reveals a real vault exists behind a different PIN. And stealth mode can disguise the app itself, its home-screen icon, as one of nine ordinary-looking apps such as a calculator or calendar, so the presence of a vault at all isn't obvious from your home screen, App Library, or search.
Which one to use
Apple's locked Notes is the right call when the note needs to stay a note: something you'll keep editing, searching alongside your other notes, and syncing across your iPhone, iPad, and Mac. It's built in, free, and backed by real encryption for the note's contents.
A separate vault makes more sense when you specifically don't want it tied to your Apple ID or discoverable if someone picks up your unlocked phone and starts browsing apps, or when you want a second layer, a decoy PIN or a disguised icon, that Apple's built-in lock simply doesn't offer.
Common questions
Can Apple see the contents of my locked notes?
Locked notes are end-to-end encrypted using a key derived from your passcode or Notes password, so the note body itself isn't readable by Apple. Some metadata around the note isn't part of that same encryption, according to Apple's own security documentation.
If I lock a note, does it still back up to iCloud?
Yes. Locking a note only restricts who can read its contents, it doesn't remove the note from iCloud sync. It still appears, still locked, on every device signed into the same Apple Account.
Does Secure Folder send any of my note content anywhere?
No. The app never uploads notes or other vault content, and there's no cloud sync. The vault stays on your iPhone.
Can someone tell I have a hidden vault just by looking at my phone?
Not easily. Secure Folder's stealth mode can disguise the app's home-screen icon as one of nine ordinary apps, and its decoy vault opens a separate, harmless-looking vault under a different PIN with no visible indicator that a real vault exists behind it.
Hide private photos in a PIN-protected vault.
Secure Folder is free to download on the App Store, and your photos and videos stay on your iPhone.