Where to Store Private Photos Safely: Cloud, Phone or Mac
Store private photos where only you hold the key. Under standard iCloud protection, Apple holds the keys. Advanced Data Protection moves them to your devices. A container you encrypt yourself before any sync also keeps the key with you. Whichever you pick, keep a second copy and test your recovery.
Steps use macOS 14 and later names. Menu wording can differ slightly between versions.
Who holds the key decides the answer
A cloud vault, an online photo vault or a vault app all ask the same question: who can decrypt my photos? If the provider holds the key, the provider can read them or help someone else read them. If only you hold the key, nobody can help you when you lose it.
| Place | Who holds the key | Limit |
|---|---|---|
| iCloud Photos, standard protection | Apple. Photos are encrypted in transit and on the server. | Apple can decrypt them and help with recovery. Photos are not end-to-end encrypted. |
| iCloud Photos with Advanced Data Protection | Your trusted devices | Apple cannot recover the data. Shared Albums are not covered. |
| Google Photos Locked Folder | Protected by your device screen lock, with standard encryption per Google | Items you do not back up exist only on that device. |
| An encrypted container you make | You | You manage the password and the backup. There is no reset. |
| A cloud vault app | Depends on the app | Read the app's own page. Some do not say who holds the keys. |
A short process for choosing
-
Name the risk
Is it someone using your phone or Mac, a break-in to your cloud account, a lost device, or the provider itself? Each risk points to a different row in the table.
-
Pick the place
For casual privacy, a built-in lock may do. For a break-in or a provider you do not want to trust, pick storage where you hold the key.
-
Keep a second copy
Apple says photos in iCloud Photos are not duplicated in your iCloud backup, and tells you to keep backup copies of your library. Copy your encrypted container to a drive that is not your Mac.
-
Test the restore
Open the copy on another device, or after you sign out, before you delete anything. A backup you never opened is a guess.
iCloud Photos: what Apple says
Apple says iCloud Photos keeps your library in iCloud so every device shows the same photos. A deletion on one device applies to all of them. Deleted items stay in Recently Deleted for 30 days. Advanced Data Protection is an optional setting that adds end-to-end encryption for Photos. You must set up a recovery method first. The steps and limits are in iCloud Advanced Data Protection explained. If you do not want some pictures in iCloud at all, read photos you do not want in iCloud.
Cloud vault apps and online photo vaults
Apps that offer a private cloud backup vary. Keepsafe's site says items are backed up privately and does not say where or how. Vaultaire's site says its iCloud backup is encrypted, on by default and can be turned off. Before you trust one, look for these on the provider's own page:
- Is the backup encrypted on your device before it uploads?
- Who holds the key, and can the provider reset your access?
- Does the app need an account, and what does it do with your email?
- What happens to your photos if the app disappears from the store?
See Keepsafe alternatives and how to check a vault app download.
Encrypt first, then sync
You can use any cloud drive and still keep the key. Make an encrypted container first, then let the cloud sync the container. The cloud then holds only scrambled data. Build a private photo vault on a Mac shows the steps, and Cryptomator is open source software that does the same job. Store the password somewhere other than the same cloud account.
Mistakes that undo a private store
- One copy only. If the container is on one drive and that drive fails, the photos are gone. Apple says iCloud Photos is not duplicated in your iCloud backup, so keep backup copies of your library.
- The password lives in the same cloud account. If someone breaks into the account, they get the vault and the key.
- The originals stay in Photos. A private copy does not remove the public one. Delete the original and empty Recently Deleted.
- An app with broad access. Check which permissions a vault app asks for, such as full access to your photo library, and decide whether you accept them.
- No restore test. The first time you open a backup should not be the day you need it.
Where Hidden Folder fits
Frequently asked questions
Are iCloud Photos private?
Under standard protection Apple holds the encryption keys, so Apple can decrypt your photos when needed. Advanced Data Protection changes that to end-to-end encryption.
Is Google Photos Locked Folder end-to-end encrypted?
Google says items are protected by its standard encryption and your device screen lock. Its page does not say end-to-end.
Where should I keep private photos so nobody else can open them?
Keep them in a container you encrypt yourself and store the key apart from the cloud. You then carry the recovery risk, so keep two copies.
Do I need an app to store private photos?
No. The Hidden album, Locked Folder and an encrypted disk image come with Photos, Google Photos and macOS. An app only adds convenience.
Can I back up private photos without iCloud?
Yes. Copy an encrypted container to an external drive. Test that you can open the copy.
What if I forget the password to my encrypted container?
Apple cannot recover a disk image password. Store the password in a password manager or on paper before you rely on it.
References
Your files. Your Mac. Locked.
Coming soon. Join the waitlist and we email the link.
Get early access