Security
What Actually Protects Your Photos in a Vault App?
Mehmet Ali Kısacık · Developer of Secure Folder · August 12, 2026 · 5 min read
Key takeaways
- The storage model, not the cryptography, decides whether a breach can reach your photos.
- No server means nothing to leak; no account means no login to phish and no reset to socially engineer.
- A separate vault PIN protects you from someone who can unlock your phone, not from someone who knows the vault code.
- No server also means no recovery. Forget the PIN with no biometric unlock and the contents are gone.
- Deleting an original from Photos leaves it in Recently Deleted for 30 days unless you empty that album.
What protects a photo inside a vault app is mostly architecture, not cryptography. If an app has no server, no account, and never uploads your files, then the entire category of incident that leaks cloud photo libraries has nothing to reach. That is a smaller claim than most vault marketing makes, and it is the part that actually holds up.
On-device storage: On-device storage means your files are written to your own iPhone and nowhere else. There is no copy sitting on a company's server, no account that can be phished or reused, and nothing for anyone to hand over, because the company never received it in the first place.
The threat that actually happens
Ask what realistically goes wrong with private photos and the list is short. Someone picks up your unlocked phone. Someone close to you goes looking. Or a service holding a copy of your library is breached. Only the third one scales to millions of people at once, and it is the one an app's storage model decides entirely.
The Identity Theft Resource Center counted 3,158 data compromises in the United States in 2024, generating more than 1.35 billion victim notices (ITRC 2024 Annual Data Breach Report).
An app with no storage server does not appear in numbers like that. Not because it is cleverer than the companies that do, but because it is not holding anything to begin with. The same logic covers accounts: if there is no login, there is no password to phish, no credential you reused on another site, and no support process that can be talked into a reset.
What this does not protect you from
This is where most vault pages stop, so it is worth being direct about the limits. On-device storage is a real protection with a specific shape, and it leaves three gaps.
- Someone who already knows your PIN. A separate vault code keeps your photos closed when someone unlocks the phone itself, which is the common case. It does nothing once that person also has the vault code. The decoy vault covers being pressured to open the app in front of someone, not a code that has already leaked.
- A phone handed over with the vault already open. Protection resumes when the app locks, not while you are standing there with it unlocked on screen.
- Loss, with no backup. No server also means no recovery. If you delete the app, or forget your PIN with no biometric unlock enabled, the contents are gone, and the developer cannot restore them because the developer never had them.
The step most people skip
Importing a photo into a vault does not remove it from the Photos app, and deleting the original is not immediate either. Apple's own documentation is explicit: "When you delete photos and videos, they go to your Recently Deleted album for 30 days. After 30 days, they'll be permanently deleted" (Apple Support).
So for a month after you tidy up, a copy is still sitting in an album that anyone who can open your phone is able to browse. The order that actually finishes the job:
- Import the photos and videos into the vault.
- Delete the originals from the Photos app.
- Open Recently Deleted and empty it, instead of waiting out the 30 days.
Common questions
Does Secure Folder encrypt my photos?
Secure Folder makes no encryption claim, and that is deliberate. What it will state is what can be pointed at: your files are written to the app's protected storage on your iPhone, there is no server they are copied to, and the vault opens with a PIN separate from your phone's passcode. Describing the protection you can verify is more useful than describing the one that sounds most impressive.
If the developer cannot recover my photos, what happens if I forget my PIN?
You lose access to them. There is no account, so there is no reset link and no support route back in. Enabling Face ID or Touch ID gives you a second way in and is the only real safety net. Keep a separate backup of anything you cannot afford to lose.
Is a vault app safer than the iPhone's Hidden album?
For most people yes, for one specific reason. The Hidden album opens with the same Face ID or passcode that unlocks the phone, so anyone who can get into the phone can get into it. A separate app with its own PIN breaks that link, and adds a decoy vault and intruder alerts that the Hidden album has no equivalent for.
Does the vault need an internet connection?
No. Importing, browsing, and unlocking all work with no network at all. The only parts of the app that ever use one are anonymous usage analytics and App Store purchases, and neither touches what is inside your vault.
Keep your photos yours.
Secure Folder is free on the App Store — everything stays on your iPhone.