Do hidden photos go to iCloud?

If you use iCloud Photos, a photo you hide is still part of your iCloud photo library. Apple says that photos you hide on one device “are hidden on your other devices too.” That only works because the photo, and the fact that it is hidden, travel to every iPhone, iPad and Mac signed in to the same Apple Account with iCloud Photos on.

Hiding changes where a photo shows up. It does not change where the photo is stored, and it does not stop someone who knows your passcode.

Hidden photos sync to every device on your account

Apple’s iPhone User Guide is direct about it: when you use iCloud Photos, any photos you delete or hide are deleted or hidden on all your devices. So a hidden photo:

• is uploaded to iCloud with the rest of your library
• sits in the Hidden album on your iPad and Mac as well as your iPhone
• can be opened on any of those devices by someone who can unlock it

This catches people out with shared or older devices. If an old iPad in the living room is still signed in to your Apple Account with iCloud Photos on, your hidden photos are on it too. On a Mac, Apple says the Hidden album is off by default, but with iCloud Photos the photos you hide on your iPhone are hidden on the Mac too, which means they are there.

What hiding a photo actually does

To hide a photo, open Photos, touch and hold the photo or video, tap Hide, and confirm. Apple says the item then moves to the Hidden album and no longer appears in your Library, in other albums, or in the Photos widget on your Home Screen.

To find it again, scroll down in Photos and tap Hidden under Utilities, tap View Album, and unlock with Face ID or Touch ID. To unhide, touch and hold the item and tap Unhide.

You can also remove the Hidden album from view: go to Settings > Apps > Photos and turn off Show Hidden Album. Apple says that with it off, hidden photos won’t be visible in the Photos app at all. On iPhone and iPad the album is visible by default.

That is the whole job of hiding. It keeps a photo out of the places people scroll through, which is useful when you hand someone your phone to look at vacation pictures. It was not built to stop someone who can unlock the phone.

Who can open the Hidden album

Since iOS 16, the Hidden album has been locked by default. Apple’s current guide says the Hidden and Recently Deleted collections can be unlocked “using Face ID, Touch ID, or your passcode.”

The passcode is the weak point. Anyone who knows it can open your Hidden album: a partner, a child who watched you type it, or someone who saw you unlock the phone and then took it.

The lock itself can be switched off. In Settings > Apps > Photos, turning off Use Face ID, Use Touch ID or Use Passcode removes it. If other people use your phone, check that this is still on.

Apps are a second route. In Apple’s developer framework for photos, “hidden” is a property on each photo. When an app asks for photos, hidden ones are left out by default, but the app can set an option so that its request includes “all assets regardless of their hidden state.” Apple’s documentation does not say whether the album lock changes this. The safe assumption: an app you have given full photo access may be able to read hidden photos. You can review those apps in Settings > Privacy & Security > Photos.

How hidden photos are protected in iCloud

Apple offers two levels of protection for iCloud data, and hidden photos follow whichever one your account uses.

Standard data protection is the default

Apple says that under standard data protection your iCloud data is encrypted, the keys are kept in Apple data centers so Apple can help with data recovery, and only certain categories are end-⁠to-⁠end encrypted. Photos is not one of those categories by default. Apple can decrypt your data on your behalf, for example when you sign in on a new device or recover your data after forgetting your password.

Advanced Data Protection adds end-⁠to-⁠end encryption

Advanced Data Protection (ADP) is an opt-⁠in setting, available since iOS 16.2. With it on, Apple says 25 data categories are end-⁠to-⁠end encrypted, including iCloud Backup and Photos. Apple also says it then doesn’t have the encryption keys needed to help you recover that data, so if you lose access, Apple can’t get it back for you.

ADP has gaps worth knowing:

• Shared Albums are not covered. Apple says the Shared Albums feature doesn’t support ADP and is not end-⁠to-⁠end encrypted even when ADP is on.
• Not every account can use it. Managed Apple Accounts and child accounts are not eligible.
• New UK users can’t turn it on. In a notice dated 22 September 2025, Apple said UK users who had not already enabled ADP no longer have the option. For them, Photos stays under standard data protection. Check Apple’s page for the current status.

What stays under Apple’s keys even with ADP

Apple says some metadata and usage information remains under standard data protection even with ADP on. For Photos, its list includes “whether an item has been marked as a favorite, hidden, or marked as deleted.” Apple adds that this metadata is always encrypted, but the keys are stored by Apple.

In plain terms: with ADP on, Apple cannot read your hidden photos, but the label that says a photo is hidden is protected with keys Apple holds.

Hidden album or a separate encrypted vault

The Hidden album is good enough if you only want photos out of your main grid and you are the only person who knows your passcode. If someone else knows or could learn your passcode, or you don’t want the photos on every device on your account, you need something that does not open with the passcode.

How to keep a photo off iCloud and your other devices

Hiding is not a way to keep a photo off iCloud: with iCloud Photos on, Apple says a photo you hide is hidden on all your devices. If you want a specific photo out:

1. Move a copy out of your photo library first. Use an app that encrypts files with a key of its own, not your phone passcode. Open the copy there before you delete anything.
2. Delete the original from Photos. With iCloud Photos on, deleting on one device deletes it on all devices signed in to the same Apple Account.
3. Empty it from Recently Deleted. Apple keeps deleted items there for 30 days before removing them from your iPhone, iCloud and other devices. You can delete them permanently at any time during those 30 days.
4. Keep private photos out of Shared Albums. They are not end-⁠to-⁠end encrypted, with or without ADP.
5. Consider ADP for the rest of your library, if your account is eligible, so Apple cannot read your photos in iCloud.

A two-⁠minute checklist

• Settings > Apps > Photos: make sure Use Face ID (or Touch ID) and Use Passcode are on.
• Same screen: turn off Show Hidden Album if you don’t want the album to appear at all.
• Settings > Privacy & Security > Photos: remove full access from any app that doesn’t need it.
• Check which iPads and Macs are signed in to your Apple Account. Each one with iCloud Photos on has your hidden photos.
• If someone else knows your passcode, treat the Hidden album as visible to them.