Where should I keep intimate photos on my phone?

They are your photos, of you or for someone you trust. The worry is not that they exist. It is that the camera roll treats them like every other photo. It syncs them to the family iPad and puts them in a memory. It opens them for anyone who knows your passcode. This page explains where intimate photos end up by default on iPhone and Android, and where to keep them instead. We checked each fact against Apple’s and Google’s own pages on 2026-10-08.

Where the camera roll sends them

A photo you take with the phone’s camera lands in Photos or Google Photos. From there it travels.

• Every device on your account. Apple says iCloud Photos “keeps every photo and video you take in iCloud, so you can access your library from any device.” Google Photos says the same for backed up photos. Our page on iPhone photos that show up on a kid’s iPad covers the most common surprise.
• Shared spaces. If you use an iCloud Shared Photo Library with Sharing from Camera on, a new shot can land there for every member. Apple says “All participants can add, edit, and delete content in the Shared Library.” In Google Photos, partner sharing sends what you chose as soon as it backs up. See our page on Google Photos partner sharing.
• Memories and widgets. Photos apps pick photos to show you again. Read when Memories show private photos and when a photo widget shows the wrong photo.
• Your passcode. Anyone who knows your phone passcode can open Photos, and on iPhone the Hidden album too. See what a phone passcode opens.

What the built-in hiding places do

iPhone Hidden album. It takes photos out of the main grid, and since iOS 16 the album is locked by default. Apple says “If you use iCloud Photos, the photos that you hide on one device are hidden on your other devices too.” It opens with Face ID, Touch ID or the passcode. Our Hidden album guide covers each detail.

Google Photos Locked Folder. Google says items in it “won’t appear in the Photos grid, memories, search or albums”, and that it “is designed to be private and not shared.” But its password “is the same as your device screen lock”, and “people who have access to the device screen lock can unlock Locked Folder.” Read our Locked Folder guide.

iCloud encryption. Standard iCloud keeps the keys to your photos on Apple’s side. Advanced Data Protection makes iCloud Photos end-to-end encrypted, but Apple says “the Shared Albums feature in Photos” does not support it. Our iCloud Photos encryption guide explains both modes.

Both built-in places are better than the main grid. Both fall back to the lock that the people closest to you are most likely to know.

A place with its own code

York Vault keeps intimate photos in a separate, encrypted library on iPhone and Android.

1. Pick a code no one has seen. A PIN, a passcode with letters, or a pattern. It is never the phone passcode. Face ID or fingerprint is optional. If someone adds a new face or finger in the phone’s settings, it switches off until you type your code. See lock options.
2. Find what is already there. With your OK, York Vault can scan your camera roll on the phone and group what it finds: IDs and cards, documents, private screenshots and intimate photos. The scan sends nothing off the phone and works in airplane mode. See the sensitive photo scan.
3. Add them, then remove the originals. York Vault checks each encrypted copy before it offers to remove the original from Photos. Then empty Recently Deleted. The import and cleanup page shows each step.
4. Take new ones in York Vault. The private camera encrypts each photo in memory and saves nothing to Photos.
5. Add a second lock if you want one. An album code gives one album its own key. With the library open, that album still shows only a blurred cover until you type its code.

York Vault also keeps these photos out of the places above. It adds nothing to Spotlight or Siri suggestions. During screen recording, mirroring or AirPlay, it shows a plain cover instead of the photo. On Android it blocks screenshots on every screen.

The backup goes to your own iCloud or Google Drive as encrypted chunks with random names. iCloud and Google see no file names, types or dates. See encrypted backup.

Before you send one

Once a photo leaves your phone, the other person holds a copy, and so may the app you send it through. Three things lower the risk:

• Remove the location. A photo can carry the place it was taken. When you share from York Vault, it removes location and camera details by default. See share files safely.
• Send a link that ends. A York Vault private share link opens in the York Vault app or App Clip. On Free it expires after 7 days or 3 opens, with saving off and screenshot protection on. With Plus you choose the limits and can revoke it.
• Know what no app can stop. A second phone can photograph any screen. York Vault’s link page says so plainly.

If a photo got out

If someone shares or threatens to share your intimate photos, it is not your fault, and help exists. Save proof before you report: screenshots that show the account, the link and the date. Then contact one of the help lines at the top of this page. Our pages on a threat to share your photos and photos shared without consent walk through each step. Our page on keeping a record of abuse explains how to store that proof so the other person cannot reach it.