Can the Hidden album Face ID be bypassed?

Apple does not document a way around the lock, and this page does not describe one. What matters is who can pass your phone's authentication. Apple says the Hidden album requires authentication, Face ID or Touch ID on iPhone, so anyone who can pass that check, or who can change what it accepts, can open the album.

What the lock covers

Apple's page says the Hidden album is locked by default and requires authentication to unlock in Photos on iOS 16 and later. On an iPhone you unlock it with Face ID or Touch ID. That stops someone who picks up your phone while it is already unlocked.

What it does not cover

  • Someone who can pass your authentication. The lock is not a second credential. If another person's face or fingerprint is set up on your phone, or they know your passcode, the album does not add a barrier of its own.
  • Your passcode, in general. Apple says your phone still asks for the passcode after it restarts, after a software update and when you change passcode settings. The passcode is the foundation under Face ID and Touch ID.
  • The copy in iCloud. Anyone with your Apple Account and the means to sign in is outside the album's lock.

Did someone open it?

We found no Apple page that says the Hidden album records who opened it, so we cannot promise you can tell. Do not rely on it. If you suspect someone knows your passcode, act on the cause.

What you can do

  1. Change the passcode: Settings, Face ID & Passcode, enter your current passcode, then Change Passcode. Apple's Passcode Options let you use a longer custom code.
  2. On iOS 17 and later, Apple says your previous passcode can still be used once for 72 hours after a change. Use "Expire Previous Passcode Now" on the same screen if you want that to stop at once.
  3. Check which faces and fingerprints are set up, in the same Settings screen, and remove any you do not recognise.
  4. For photos that must be protected from someone you live with, consider a separate store with its own credential rather than a lock that follows your phone's.
Who is lookingHidden album stops them?
Someone with the phone, no accessYes, as far as Apple documents
Someone who knows your passcodeNo
Someone with their own face or fingerprint set upNo

Related: where is the Hidden album password, is the Hidden album secure, the answer is the iPhone Hidden album safe, and Hidden album or vault app.

Frequently asked questions

Can someone open my Hidden album without Face ID?

Apple documents authentication by Face ID or Touch ID on iPhone and does not describe other routes, so we make no claim either way. Anyone who can pass your device authentication should be treated as able to open it.

How do I change the passcode?

Settings, Face ID & Passcode, enter your current passcode, then Change Passcode.

Can I see who opened the album?

We found no Apple documentation of a log for it.

Sources

StrongRoom is a free iPhone app, coming to the App Store.

Free for iPhone. Pro is optional. What Pro changes.

Coming to the App Store. See what version 1.0 includes.