Hidy VaultLost or stolen iPhone: what happens to your private photos
If your iPhone is lost or stolen, your private photos are only as safe as the locks you set up beforehand. Here is what to do now, and what iOS can and cannot protect.
- Act now: use Find My to turn on Lost Mode; it locks the iPhone and suspends Apple Pay.
- Before loss: turn on Stolen Device Protection so saved passwords and account changes need Face ID.
- Photos: the Hidden album lock and Hidy's encryption are your real barriers, not the passcode alone.
What should I do first if my iPhone is lost or stolen?
Use Find My from another device or a browser. Select your iPhone and turn on Lost Mode. Apple says Lost Mode locks the iPhone and suspends Apple Pay cards and passes.
Then change your Apple Account password from a device you still control. If you use Stolen Device Protection, some account changes require an hour's security delay. That delay is a feature, not a bug.
Do not remove the iPhone from Find My. Removing it turns off Activation Lock, which is what stops another person from activating the device.
Does Lost Mode protect my private photos?
No. Lost Mode locks the iPhone and suspends Apple Pay. It does not move, hide, or encrypt anything in Photos or in a vault app.
What protects your photos is what you set up before the phone left your hands. That means the Hidden album lock, a separate vault app, and a strong passcode.
Hidy Vault keeps photos, videos and documents in encrypted vaults that open only with a pattern you draw. No account, no Hidy server. Free for 3 vaults.
What does Stolen Device Protection change?
Stolen Device Protection is an iOS 17.3 feature. It must be on before loss. Away from familiar locations, some actions need Face ID or Touch ID with no passcode fallback. Apple lists saved passwords and passkeys, Safari AutoFill payment methods, and turning off Lost Mode.
Certain critical changes need Face ID or Touch ID, a one-hour wait, and Face ID or Touch ID again. Examples include changing the Apple Account password, signing out, changing the passcode, and turning off Stolen Device Protection.
By default, the extra protections apply only away from familiar locations. You can set Require Security Delay to Always in Settings > Face ID & Passcode > Stolen Device Protection.
Stolen Device Protection protects account and device changes. It does not mention the Photos app. Do not expect it to hide your camera roll.
Can a thief open my Hidden album?
On iOS 16 and later, the Hidden album is locked by default. Apple says Hidden and Recently Deleted unlock with Face ID, Touch ID, or the device passcode.
That last option matters. Someone who watched you type your passcode can open the Hidden album. The lock slows a stranger. It does not stop a person who knows your passcode.
You can turn the lock off or on in Settings > Apps > Photos > Use Face ID. You can also hide the album itself with Show Hidden Album off. That removes the album from Utilities, but it does not encrypt the photos.
What about Recently Deleted?
Deleted photos stay in Recently Deleted for 30 days. Opening it requires Face ID, Touch ID, or the passcode. If you deleted a private photo before the phone was lost, it may still be there.
Should I erase the iPhone remotely?
Erase This Device in Find My is permanent. Apple says erasing does not delete iCloud data. If you erase, do not remove the iPhone from Find My afterward, because that removes Activation Lock.
Erasing the iPhone does not erase a vault app's iCloud backups. It also does not change what is in your iCloud account.
Where a vault app fits
A vault app adds a second lock that is not your iPhone passcode. In Hidy Vault, you unlock by drawing a pattern on a 5×5 grid. Each valid pattern opens its own vault. The pattern plus a device secret in the iPhone Keychain derive the key.
Hidy encrypts file contents, file names, thumbnails, folders, and notes with AES-256-GCM. Hidy cannot reset a forgotten pattern. A 12-word recovery phrase can reopen a vault if you forget the pattern.
Hidy locks as soon as the app goes to the background and covers the app switcher. An open vault is readable on screen, so lock the app when you set the phone down.
What iOS cannot do for you
- Lost Mode does not hide or encrypt photos.
- The Hidden album lock accepts the device passcode.
- Stolen Device Protection does not mention the Photos app.
- Erasing the iPhone does not delete iCloud data.
- No setting stops a person who already knows your passcode from opening what that passcode unlocks.
If someone is forcing you to unlock, see forced to unlock your phone. If you are selling the phone instead, see before you sell or trade in your iPhone.
Set this up before you lose the phone
- Turn on Find My iPhone in Settings > [your name] > Find My.
- Turn on Stolen Device Protection in Settings > Face ID & Passcode.
- Set Require Security Delay to Always if you want the extra checks everywhere.
- Keep the Hidden album lock on in Settings > Apps > Photos.
- Move your most private photos into an encrypted vault with its own pattern.
- Write down the vault's recovery phrase and store it away from the phone.
None of this makes a stolen iPhone safe. It raises the cost of getting in, and it buys you time to act.
Frequently asked questions
Can someone see my hidden photos if my iPhone is stolen?
If the Hidden album lock is on, opening it requires Face ID, Touch ID, or the device passcode. Someone who knows your passcode can open it. Hidy Vault adds a separate pattern that is not the iPhone passcode.
Does Lost Mode hide my photos?
No. Lost Mode locks the iPhone and suspends Apple Pay cards and passes. It does not change what is stored in Photos or in a vault app.
Should I erase my iPhone remotely?
Erase This Device in Find My is permanent. Do not remove the iPhone from Find My afterward, because that removes Activation Lock. Erasing does not delete iCloud data.
What if I never set up Find My or Stolen Device Protection?
You can still change your Apple Account password and review app access from another device. Without Find My, you cannot use Lost Mode or Activation Lock.
Does Hidy Vault protect photos on a stolen iPhone?
Hidy encrypts vault contents with AES-256-GCM, and the key comes from your pattern plus a device secret in the iPhone Keychain. Hidy cannot reset a forgotten pattern. An open vault is readable on screen, so lock the app when you put the phone down.
