Guide

Last updated: July 2026

The best photo vault apps
for iPhone.

Of the seven apps here, only three name a real encryption method for the files on your device. The other four lock the screen, not the file. This guide ranks all seven by two questions, using only what each app states about itself.

Start protecting your files
How to compare them

Two questions cover almost everything that matters.

First: is the file encrypted, or is it only locked? A PIN, a password, or Face ID can lock the app. The file itself usually stays exactly the same, unencrypted. A smaller number of apps also encrypt the file, using that same PIN or pattern to create the key. Only those apps keep your files unreadable if someone reaches them another way, such as through a backup or a cable connected to your phone.

Second: besides you, who else can get that key? An account tied to an email address usually means a server is involved. A server usually means a support process, a legal request, or a breach could reach some part of the system. An app with no account and no server has nothing for those processes to reach.

Other features, such as folders, themes, and album counts, can be useful but do not change either answer. This guide applies both questions to the apps people ask about most, using only what each one states about itself.

The short answer, ranked

Only three of the seven apps here name a real encryption method for the files on your device: ArkWarden, Keepsafe, and LockMyPix. The other four lock the screen, not the file. Ranked by how completely each answers the two questions below:

  1. Best overall: ArkWarden. The only option that encrypts every file and involves no account or server, with a recovery phrase instead of an email reset. It is also the only app here whose encryption code is open source, so the claims below can be checked rather than taken on trust.
  2. Best with a cloud account: Keepsafe. Real on-device AES, but its own documentation states it is not zero-knowledge and can access data in some cases.
  3. Best no-account alternative: LockMyPix. Names a real algorithm applied on import; the only server dependency is the optional email recovery path.
  4. Casual hiding only: Apple's free Hidden Album. Removes photos from the main camera roll but encrypts nothing, and syncs to iCloud if that is on.
On this page
  1. Every app, at a glance
  2. The apps, one by one
  3. Full comparison table
  4. Checking a claim yourself
  5. Signs to watch for
  6. Sources
  7. FAQ
Seven apps, two questions

How each app answers both questions.

Sourced from each app's own App Store listing or public documentation, linked in the sources section below.

App Does the file itself become unreadable? Who besides you could get the key?
ArkWarden
✓
Yes. Pattern-derived key, AES-256-GCM per file.
✓
No one. No account, no server, under any configuration.
Keepsafe
✓
Yes. 256-bit AES applied on-device at rest.
✗
Keepsafe, according to its own documentation. Account and server required.
LockMyPix
✓
Yes. AES-CTR 256 applied on import.
~
No one for basic use. Optional email recovery brings in a server.
Private Photo Vault
~
Only for Cloud Vault backup. Local files are PIN-gated, not encrypted.
✗
The provider, for Cloud Vault and password recovery.
Calculator#
~
Not stated. No encryption method named in its listing.
✗
The provider. Email required for password recovery.
SPV Photo Vault
~
Not stated. Description names PIN protection only.
✓
States it keeps no data on any server.
Apple Hidden Album
✗
No. Files stay in the Photos library, unencrypted.
~
Apple, if iCloud Photos is enabled.

Pricing is not included because it changes more often than encryption architecture. Check each app's own App Store listing for current pricing.

One at a time

What each app actually does.

Ordered strongest to weakest on the two questions this guide measures.

ArkWarden

No account, no server
File unreadable without a key: Yes. AES-256-GCM per file, ChaCha20-Poly1305 for the vault's category index, both through Apple's CryptoKit. The key comes from a pattern you draw, run through PBKDF2 at 600,000 iterations.
Who else can get the key: No one. No account, no email, no server, in any configuration.

The pattern is not a password checked against a stored copy. It is the input to a key derivation function. An incorrect pattern does not fail a comparison; it derives a different key that cannot decrypt the data. That is true for photos and videos, and also for documents and audio imported from the Files app. A second vault, Wing, opens with its own pattern, and both patterns open a real vault. This means handing over an unlocked phone does not expose your main vault. Recovery is a BIP-39 phrase generated on your device, not a server-side reset.

Result: both questions are answered by your device and your credentials, not by the app maker. The tradeoff is real: iOS only, and losing both the pattern and the recovery phrase means the data is gone, by design.

Keepsafe

File unreadable without a key: Yes. Keepsafe's own support documentation states 256-bit AES applied on-device at rest, not only to a cloud backup.
Who else can get the key: Keepsafe can, according to its own documentation. An account with a name and email is required at setup, and their documentation states they can view or share data in specific cases, such as a support request or legal requirement.

This is a genuine strength: Keepsafe answers the first question about as well as any app in this guide besides ArkWarden. The account and server change the second question, not the encryption method itself.

Result: real on-device encryption, paired with a company that states plainly it is not zero-knowledge. Full breakdown: ArkWarden vs Keepsafe.

LockMyPix

File unreadable without a key: Yes. AES-CTR 256, applied to every file on import, named directly in LockMyPix's own materials.
Who else can get the key: No one, for basic use, since no account is required. An optional email-based recovery path exists, and using it involves LockMyPix's servers.

LockMyPix names a real, specific algorithm, which separates it from most of the apps in this guide. Its recovery design also includes an offline fallback password alongside the email option, so the server dependency is optional rather than mandatory.

Result: strong on the first question, with a qualification on the second only if you choose the email recovery path. Full breakdown: ArkWarden vs LockMyPix.

Private Photo Vault

File unreadable without a key: Only for its optional Cloud Vault backup. Local files with Cloud Vault turned off are gated by a PIN, not individually encrypted, per the app's own FAQ.
Who else can get the key: Private Photo Vault, for Cloud Vault access and password recovery, both of which require an account.

The important distinction is daily storage versus backup. The encryption claim in Private Photo Vault's own materials is scoped to the backup feature specifically, not to how files are stored on the device the rest of the time.

Result: a PIN gate for daily use, with encryption reserved for an optional cloud feature. Full breakdown: ArkWarden vs Private Photo Vault.

Calculator#

File unreadable without a key: Not stated. The listing describes hiding, locking, and password protection, without naming an encryption algorithm.
Who else can get the key: Calculator#, since a registered email is required for password recovery.

The disguised calculator icon solves a different problem than encryption does: it stops someone from noticing the app exists. That is separate from whether the files inside it are protected once someone does find it.

Result: a clear answer to "will someone notice this app," and no stated answer to "what protects the files inside it." Full breakdown: ArkWarden vs Calculator#.

SPV Photo Vault

File unreadable without a key: Not stated. The description names PIN protection as the sole mechanism, with no encryption method mentioned anywhere.
Who else can get the key: No one, according to the app's own description. Its description states it keeps no data on any server.

SPV answers the second question about as well as ArkWarden does, based on its published description: no server involvement. The first question, what protects a file once it is inside the app, is not answered in the description.

Result: a real no-server claim, next to an unconfirmed encryption claim. Full breakdown: ArkWarden vs SPV.

Apple Hidden Album

Built in, free
File unreadable without a key: No. Apple's own documentation describes moving photos out of the main library and gating the album behind Face ID, Touch ID, or your passcode. The files stay in the Photos library, unencrypted.
Who else can get the key: There is no separate encryption key for Hidden Album. Apple can access the photos through iCloud if that sync is enabled.

Hidden Album is not an app you install, but it is the first option most people try. It changes visibility, not file protection. The photos are the same files, in the same library, with the same backup behavior, only removed from the default view.

Result: free and already on your phone, for keeping something out of a casual glance. Not built for a device search. Full breakdown: ArkWarden vs Apple Hidden Album.

These answers reflect what each app's own materials state, not independent testing of the app itself.

Beyond the two questions

Other comparison details.

✓ Yes    ✗ No    ~ Partial or not stated

App No ads Open source Recovery without an account Alternate/decoy vault
ArkWarden
✓
Funded by direct payment only
✓
Encryption code is public
✓
BIP-39 phrase, generated on-device
✓
Wing: a second real vault with its own pattern
Keepsafe
✗
Free Basic tier is ad-supported
✗
Closed source
✗
Recovery via account email only
~
Decoy Vault, Premium only, export/import required
LockMyPix
~
Not stated
✗
Closed source
~
Offline fallback password available; no recovery phrase
~
Fake Vault, separate password, key sharing not stated
Private Photo Vault
✗
Free tier is ad-supported
✗
Closed source
✗
Recovery via registered email
~
Decoy Password opens an empty view, not a full vault
Calculator#
✗
Free version is ad-supported
✗
Closed source
✗
Recovery via registered email
~
Not stated. Disguise Mode fakes an error screen.
SPV Photo Vault
✗
Free tier with in-app purchases
✗
Closed source
✗
Not stated; data deleted with the app
~
Not stated in its own description
Apple Hidden Album
✓
No ads
✗
Closed source, part of iOS
✗
No recovery mechanism
✗
Not available

The details behind "file unreadable"

App Identical files encrypt differently File names and folder structure hidden too Where the key is stored
ArkWarden
✓
Each file encrypted independently
✓
Category index encrypted with the file content
✓
iOS Keychain, encrypted at rest by the Secure Enclave
Keepsafe
~
Not stated
~
Not stated
~
Not stated
LockMyPix
~
Not stated
~
Not stated
~
Not stated
Private Photo Vault
✗
No per-file encryption for local storage
~
Not stated for local storage
~
Not stated
Calculator#
~
Not stated
~
Not stated
~
Not stated
SPV Photo Vault
~
Not stated
~
Not stated
~
Not stated
Apple Hidden Album
✗
No file encryption
✗
File names visible in the Photos library
✗
No key exists

Most cells here read "not stated" for a simple reason: this level of technical detail rarely appears in an App Store listing or public FAQ. That absence is worth noticing, but it should not be replaced with a guess.

Beyond the app store listing

What to look for if you ever inspect the storage directly.

Everything in this guide about other apps comes from what each company publishes about itself, not from installing those apps and inspecting their storage. That is an important limit. What follows is not a report of what we found. It is a description of what separates a genuinely encrypted file from a plain image file, in case you ever have legitimate access to check for yourself, for example through your own device backup on a computer you control.

A few properties give away an unencrypted file even without opening it as an image:

  • The bytes at the start of the file. Image formats begin with a fixed, recognizable pattern, the same few bytes every time. Encryption removes that pattern entirely, since the output of a strong cipher has no fixed structure to look for.
  • Embedded metadata. An unmodified photo usually still carries the details your camera recorded when you took it, things like when and on what device. An encrypted file carries nothing readable at all, because the metadata is encrypted along with everything else.
  • How the file size compares to the original. A file kept close to its original size is a hint it was never transformed. Real encryption changes the byte count slightly, since authenticated encryption adds overhead the plain file didn't have.
  • Whether the content looks patterned or random. Ordinary image data has statistical structure a trained reviewer, or a simple script, can detect. Properly encrypted data does not, because the purpose of encryption is to make the file unreadable without the key.

ArkWarden's storage is built to pass every one of these checks by design: no recognizable file-format bytes, no readable metadata, and no visible image structure, because every file and its metadata are encrypted with AES-256-GCM and ChaCha20-Poly1305 before they ever touch disk.

For an app whose own listing does not name an encryption method, such as SPV or Calculator#, this is a way to check directly rather than infer from missing information. We have not run these checks against their storage ourselves, which is why the tables above mark their file encryption as not stated rather than confirmed either way.

Before you trust one

Signs worth noticing in any vault app.

  • No named encryption method. "Secure" and "private" describe a goal. AES-256 or an equivalent describes a method. If a listing only uses the first kind of word, that is worth noticing.
  • Password reset with no recovery phrase. Restoring access through an emailed link only works if a copy of your access exists somewhere other than your device, which means it can be reached without your device too.
  • Ads inside a privacy app. An ad network learns you use a vault app. That is important information to consider for a privacy tool.
  • An account you cannot avoid. An email address attached to a privacy app is itself something that can be linked back to you.
  • Cloud sync turned on by default. If files leave the device automatically, it is worth knowing exactly where they go and whether the destination can read them.

ArkWarden was built around avoiding all five: named algorithms, no account, no ads, a recovery phrase instead of an email reset, and no sync you did not choose. Read the full security overview or the source code that performs the encryption.

Sources

Where these answers come from.

Claims about each app come from its own App Store listing and public documentation. Claims about ArkWarden's encryption come from published standards and its own source code.

Common questions

What people usually ask next.

What two things actually determine whether a photo vault app is safe?
Whether the file itself becomes unreadable without a key, and who besides you can get that key. A PIN screen answers neither question by itself. If an app names a specific encryption method applied to every file, that answers the first question well. If the app has no account, no email, and no server, that answers the second question well. Most of the differences between vault apps come down to how each one answers these two questions.
Do photo vault apps encrypt files, or just hide them?
It depends on the app, and the App Store listing usually tells you which. Some apps, including ArkWarden, Keepsafe, and LockMyPix, name a specific encryption method applied to files on the device. Others, including SPV Photo Vault and Calculator#, describe only a PIN or password gate in their own listings, with no encryption method named. Apple's Hidden Album moves photos out of view but does not encrypt them at all.
Can a vault app's own developer see my photos?
It depends on whether the app has an account and a server. Keepsafe's own support documentation states it is not designed as a completely zero-knowledge app, and that it can view or share data in specific cases such as a support request or a legal requirement. An app with no account and no server, such as ArkWarden, has no mechanism through which the developer could access files even if asked.
What happens if I forget my vault app's password and never set up recovery?
Most vault apps recover access through an email address tied to an account, which means a server is involved. Some, such as SPV Photo Vault, state plainly that data is deleted along with the app if it is uninstalled, with no recovery path beyond exporting files manually first. ArkWarden generates a BIP-39 recovery phrase of 12 or 24 words on your device at setup, with no email or server involved.
Is a free photo vault app safe to use?
It depends on how the app is funded, not just whether it charges money. A free tier that shows ads means an advertising network is receiving information about how you use a privacy app, which is worth weighing against whatever the app protects. Being free also says nothing about whether the app names a real encryption method. Check both separately: how the app makes money, and what its listing states about encryption.
Do vault apps keep photos at full resolution and quality?
It varies by app, and listings rarely say. Encryption itself never costs quality: decrypting returns exactly the bytes that were encrypted, so quality only drops if an app re-encodes or resizes a photo before storing it. ArkWarden encrypts photos and videos imported from your Photos library or the Files app exactly as they are. Photos taken with ArkWarden's own in-app camera are saved as a high-quality JPEG before encryption, a minor re-encode rather than a byte-for-byte copy of the sensor capture. For any vault app, you can check with a photo whose exact file size and dimensions you know: import it, export it, and compare the two.
Can police or forensic tools get photos out of a vault app?
There is no single answer, because vault apps differ in exactly the two ways this guide measures. Files that remain readable behind a PIN gate can be reached by anything that reads the device's storage directly, since the gate only controls the app's own screen. Where a company can reset your access, a legal order can work through the company. And where the only key is derived on your device from a credential you hold, as with ArkWarden's pattern, there is no stored copy of the key anywhere for anyone to produce.
ArkWarden

Both questions,
answered on your device.

Every file encrypted on your device, with a key derived from your pattern. No account, no ads, no server.

Scan to download ArkWarden
Install on iPhone. No account, no email.
Point your camera at the code.
Download on the App Store
Next guide: hiding photos vs. encrypting them
AES-256-GCM + ChaCha20-Poly1305 file encryption Pattern-derived key, never stored or sent anywhere No account, no ads, no server