Can Apple see your hidden photos on iPhone?

It depends on one setting. By default, iCloud encrypts your photos in transit and on Apple's servers, but Apple holds the keys. With Advanced Data Protection turned on, Photos are end-to-end encrypted and the keys sit on your trusted devices. Hiding a photo changes neither case, because a hidden photo is stored like any other.

What Apple documents

Apple's iCloud data security overview describes two levels. Under standard data protection, the default, most iCloud data is encrypted in transit and at rest, and Apple keeps the keys, which lets Apple help you recover data. Under Advanced Data Protection, an optional setting, your trusted devices keep sole access to the keys for most iCloud data, and Photos are among the end-to-end encrypted categories.

This page cannot tell you what Apple does or does not do with data it can decrypt. Apple's overview describes the encryption and the key holders, not any scanning policy, so we say nothing about scanning here.

What Advanced Data Protection does not cover

  • Apple says some Photos metadata stays under standard protection even with Advanced Data Protection on. The examples Apple gives include checksums, favorite, hidden and deleted flags, and view counts.
  • Shared Albums do not support Advanced Data Protection, so shared content is not end-to-end encrypted.
  • With it on, access to your iCloud data on the web at iCloud.com is disabled.
  • If you lose account access, recovery depends on your device passcode or password, a recovery contact or a recovery key, because Apple does not hold the keys.

How to turn it on

Apple's steps for an iPhone: Settings, your name, iCloud, Advanced Data Protection, then Turn on Advanced Data Protection. You must set up at least one alternative recovery method first, and all your signed-in devices need current software. Turning it on from one device enables it for the whole account.

SettingWho holds the keys for PhotosHidden photos
Standard data protection (default)AppleEncrypted, readable by Apple's systems
Advanced Data ProtectionYour trusted devicesEnd-to-end encrypted; the hidden flag stays under standard protection
Hidden album onlyWhatever the setting above saysHiding adds no encryption

Hiding is not encrypting

The Hidden album is a screen-level lock. The lock stops someone who has your phone in their hands. It does nothing to the copy in iCloud. If your concern is who can read your photos in iCloud, the setting that matters is Advanced Data Protection, and the trade-off is that Apple cannot help you recover data.

See also are iCloud Photos end-to-end encrypted, is the Hidden album secure, the short answer can Apple see my hidden photos and Hidden album or vault app.

Frequently asked questions

Can Apple see my hidden photos?

By default Apple holds the keys to your iCloud Photos, so the data is encrypted but not end-to-end. With Advanced Data Protection on, the keys are on your trusted devices.

Does the Hidden album encrypt photos?

No. It hides them in Photos and locks the album behind authentication. It does not add encryption.

Is the hidden flag protected by Advanced Data Protection?

Apple lists favorite, hidden and deleted flags among Photos metadata that stays under standard protection.

Does Advanced Data Protection have a downside?

Apple says that if you lose account access you must rely on a recovery contact, a recovery key or your device passcode, since Apple cannot recover the data for you.

Sources

StrongRoom is a free iPhone app, coming to the App Store.

Free for iPhone. Pro is optional. What Pro changes.

Coming to the App Store. See what version 1.0 includes.