When someone knows your iPhone passcode

By The StrongRoom team · Published 2026-10-30 · Updated 2026-10-30 · Last verified on iOS 26.x on 2026-10-30

If someone knows your iPhone passcode, treat everything the passcode opens as open to them. Change the passcode if you can do so safely, and keep sensitive items behind a separate credential that nobody else knows. One caution first: suddenly cutting off someone's access can make some situations worse. If you fear for your safety, read the safety page before changing anything.

Start with the safety question

Passcodes get shared for ordinary reasons: a partner who needs to take a call, a parent who set up your first phone, a friend who helped you fix something. Changing it is usually fine. In a relationship where one person controls or monitors the other, though, a sudden lock-out can raise the risk. If that describes your situation, start with a helpline and a safety plan, and keep reading only afterwards. Our page on phone privacy in an unsafe relationship lists helplines and Apple's own safety guidance first.

What a known passcode opens

Apple's Hidden album page says the album is locked by default and requires authentication to open in Photos. It does not tell you which credentials are accepted. The practical rule is simple: if someone can unlock your phone, assume they can reach anything that opens when the phone is unlocked or authenticated with your device credentials. That includes the Photos app, Messages, Mail, Files and saved sign-ins. Hiding a photo keeps it out of the Library view, not away from a person who knows the passcode.

Change the passcode

Apple's page "Use a passcode with your iPhone, iPad, or iPod touch" describes the steps:

1. Open Settings > Face ID & Passcode and enter your current passcode.
2. Tap Change Passcode, enter the current one, then choose a new code. You can pick a six-digit code, a four-digit code, or a custom code.
3. If you think someone else knows the old passcode, go back to Settings > Face ID & Passcode and tap Expire Previous Passcode. Apple explains that on iOS 17 and later, the old passcode can otherwise be used once within 72 hours to reset a forgotten new one, and this option closes that window early.

Apple's Personal Safety guide also has a page, "Set a unique device passcode or password", on choosing a code nobody else would guess. Pick something not tied to a birthday, an address or a number you have said aloud.

Why a separate credential helps

Changing the phone passcode does not help if you cannot change it, if you are likely to be asked for it again, or if sharing it is expected in your home. A second lock inside the phone solves a narrower and more common problem: the person can use your phone, but not open the things you keep private.

How it works:

• Draw a pattern on a 5 x 5 grid, at least six dots, or choose a passphrase. A passphrase is harder to guess than a pattern; use one if the risk is serious.
• By default the Vault locks as soon as you leave the app, and the app switcher shows a blank screen.
• Guessing is slowed down: after ten tries in five minutes, each further try waits longer.
• The Attempt log shows the times of the last 20 failed tries, never what was typed. A try that opened a Vault is never logged.
• You can change your pattern or passphrase any time; your files stay as they are.
• Face ID is not an option inside StrongRoom, on purpose: it would show which Vault is real.

Keeping the second credential secret

A separate credential only works while it stays separate. Do not reuse the phone passcode, do not choose a pattern someone has watched you draw, and do not write the Recovery Phrase where that person will find it. Store the twelve words on paper in a place only you can reach. They are shown once, and we keep no copy.

Where StrongRoom does not help

• It does not stop someone who looks over your shoulder as you enter your pattern or passphrase, or who persuades or pressures you to open it.
• It does not hide itself. The app icon shows on your Home Screen, and a person who knows the passcode can see that you have it.
• It cannot help on a monitored phone. If spyware, a managed profile or a shared Apple Account lets another person see your screen or your files, an app on that phone cannot be private. Apple's Safety Check can help you review what you share with people and apps, but cannot review everything.
• It does not move anything out of your Photos library for you. A copy that stays in Photos is still reachable. When you import, StrongRoom offers to delete the originals, asking every time.
• It keeps no copy off your phone. Lose the phone without your Recovery Phrase or an Export Package and the Vault is gone.

A short plan

1. Decide whether changing access is safe where you are.
2. Change the iPhone passcode and expire the old one.
3. Move truly sensitive items into a Vault with a credential that is new to everyone but you.
4. Delete the originals from Photos, after checking the import worked.
5. Write down the Recovery Phrase; make an Export Package and keep it somewhere safe that is not the phone.

Frequently asked questions

Sources

• Use a passcode with your iPhone, iPad, or iPod touch (Apple Support), checked on 2026-10-30.
• Set a unique device passcode or password (Personal Safety User Guide, Apple Support), checked on 2026-10-30.
• Hide photos on your iPhone, iPad, Mac, or Apple Vision Pro with the Hidden album (Apple Support), checked on 2026-10-30.
• Safety Check for an iPhone with iOS 16 or later (Apple Support), checked on 2026-10-30.