Back to Articles

Google Photos Locked Folder vs. a Dedicated Vault App

Locked Folder keeps sensitive photos out of your main Google Photos grid, but it opens with the same passcode or Face ID that unlocks your whole phone. Here's what that does and doesn't protect against, and where a dedicated vault app closes the gap.

What it is (one-paragraph answer)

Google Photos Locked Folder hides photos and videos from your main library, opening with the same PIN, passcode, or Face ID/Touch ID that unlocks the rest of your phone. A dedicated vault app is different: a separate application with its own credential — in Privara's case, a PIN independent of your device lock, protected by its own encryption. Both hide content from casual view. Only one still protects it once someone already knows how to unlock your phone.

How it actually works

Move a photo into Locked Folder and it disappears from your Photos grid, search, albums, memories, and any other app reading your camera roll, per Google's documentation. But the folder has no separate password — "your Locked Folder password is the same as your device screen lock" — so anyone who knows that screen lock can open it too. Content inside can't be shared, edited, or added to an album until you move it back out, which re-exposes it. Backup is optional. Skip it, and everything is local-only, gone for good if you uninstall the app or lose the phone. Turn it on, and content syncs to your Google Account instead (see backing up private photos without Google or iCloud if that tradeoff bothers you). Locked Folder arrived on iOS in 2023, using Face ID, Touch ID, or your passcode the same way; backed-up content gets Google's standard "encryption in transit and at rest" — not a scheme unique to the folder.

A dedicated vault app usually asks for its own PIN, kept separate from whatever unlocks your phone. Android has its own version of this split — see Locked Folder vs. Secure Folder on Android — but the core question is the same everywhere: is your content gated by your device lock, or by something independent of it?

Why it matters for your privacy

The real distinction is access control versus encryption. A screen lock decides who's allowed to look. Encryption at rest makes the data itself unreadable without a key — a guarantee that holds even if someone bypasses the lock screen. As the EFF's Surveillance Self-Defense guide puts it, locking a device "does not always mean full-disk encryption is enabled."

Applied to Locked Folder, that gap is concrete. Anyone who knows your passcode — a family member, a repair technician, someone who watched you type it in — can open your Locked Folder too. Worth knowing, too: Google Photos has a documented history here. A 2020 bug briefly misdirected some users' private videos into strangers' takeout archives, a relevant data point when you're deciding how much sensitive material belongs in any general-purpose cloud photo product.

None of this makes Locked Folder useless — it's a reasonable speed bump against someone casually scrolling your camera roll. It just isn't built to survive a lost device, a repair-shop handoff, or a passcode that's no longer a secret. See how to spot a trustworthy vault app, and why a passcode still beats Face ID, for more.

How Privara handles this

Privara closes exactly this gap. It opens with its own PIN, independent of your phone's lock screen, disguised behind what looks and works like an ordinary calculator — so even someone who knows your device passcode has no reason to suspect a vault is there. Content inside is protected with AES-256 encryption at rest, not just moved out of view — the same distinction the EFF guide draws between encryption and access control. Privara needs no account and uploads nothing to a server by default: a local, zero-knowledge vault, unlike a folder tied to your Google Account.

And it's not just photos: the same encrypted vault holds photos, videos, documents, and contacts in one place, with a decoy PIN that opens a separate vault and break-in detection that captures a photo of anyone who tries the wrong PIN. If Locked Folder's dependence on your device passcode gives you pause, download Privara on the App Store and set up a vault with its own key.

Frequently Asked Questions

Is Google Photos Locked Folder actually encrypted?

Google says it's protected by standard encryption practices and, once backed up, encryption in transit and at rest — the same baseline applied to any backed-up Google Account data, not a key scoped only to that folder.

Can someone with my phone's passcode see my Locked Folder?

Yes. Google states that anyone with the device's screen lock can open Locked Folder, since it uses the same PIN, passcode, or Face ID/Touch ID as the rest of the phone — no independent credential guards it.

What happens to Locked Folder photos if I lose my phone or delete the app?

Without backup, items are local-only and gone for good if the app is uninstalled or the device is lost. Turning on backup avoids that, but the content now lives in your Google Account.

Is a dedicated vault app safer than Google Photos Locked Folder?

Depends what you're protecting against. If you just want something out of view from someone briefly scrolling an unlocked phone, Locked Folder's screen-lock gate is enough. Against a lost device or a passcode someone else has learned, a vault app with its own PIN and real at-rest encryption closes gaps Locked Folder doesn't.

Conclusion

Locked Folder is a convenient, built-in way to keep photos out of casual view, but it's only as private as your device passcode — anyone who has that has Locked Folder too. A dedicated vault app is a separate layer: its own PIN, its own encryption, unaffected by who else can unlock your phone. Want protection that holds up even when your passcode doesn't stay secret? That's what a vault built for the job — like Privara — is for.