Police, like anyone else, can only open what can be unlocked. If a vault app truly encrypts your photos on the phone with a key only you hold, the files cannot be read without that key, by police, by the app maker, or by Apple. What police can do is ask you for the key, or reach the photos some other way. This guide explains which parts a vault protects and which it does not. It is not legal advice; the law on whether you must hand over a passcode differs by country, and a local lawyer is the right person to ask.
What a passcode unlocks
Your iPhone passcode opens the phone. Once the phone is open, so is everything the phone shows without a second key: the Photos app, the Hidden album, messages, notes that are not locked. The Hidden album is behind Face ID since iOS 16, but on an unlocked phone the passcode opens it too. It is a convenience lock, not a separate key.
That matters because a phone can be opened in more ways than someone typing the passcode. A person can be asked or made to unlock it. A phone that was unlocked recently is in a different state from one that was just switched on. Apple documents these protections in its platform security guide, and it is worth reading if this question matters to you.
What iCloud holds
Many photos never stay only on the phone. With iCloud Photos on, your library is in iCloud. Under Apple’s standard data protection, Apple holds the keys for iCloud Photos and iCloud Backup, and Apple’s published law enforcement guidelines describe handing over iCloud content in response to valid legal process. If you turn on Advanced Data Protection, Apple documents that it no longer holds those keys.
So a photo that is hidden on the phone but synced to iCloud Photos is still in iCloud, in a form Apple can read unless Advanced Data Protection is on.
What an encrypted vault changes
A real vault adds a second key that the phone passcode does not open. In Vaultpod, everything is encrypted on the phone before it is stored, and the key comes from a pattern you draw on a 5x5 grid. Without the pattern, the stored files are scrambled data.
- Unlocking the phone does not open the vault. The vault needs its own pattern.
- The encrypted backup goes to your own iCloud. Apple only ever holds encrypted data, so what Apple could hand over from that backup is unreadable without the pattern or the recovery phrase.
- There are no accounts and no servers of ours, so there is nothing on our side to hand over. There is no reset and no backdoor: without the pattern or the recovery phrase, nobody can open the vault, including us.
- A different pattern opens a different vault, and there is no list of vaults and no wrong-pattern message.
Pro also has a duress pattern that removes access to every vault on the phone in one gesture, while the backups stay safe. Using one in front of police may have legal consequences where you live, so think about that before relying on it.
What a vault does not protect
Encryption protects files from people who do not have the key. It does nothing once the key is known.
- If you give someone your pattern or your recovery phrase, they have your photos.
- If the vault is open on screen when the phone is taken, it is open. Vaultpod locks when you leave the app, but not while you are looking at it.
- If the originals are still in Photos, the vault did not hide them. After importing, delete the originals, and check Recently Deleted in Photos too.
- Copies elsewhere are outside the vault: a photo sent in a chat, saved to another cloud, or on someone else’s phone.
- Storage used is visible on every iPhone, and the app itself is visible. A vault hides what is inside, not that it exists.
Our guide on whether photo vault apps are safe covers how to tell a real encrypted vault from a folder with a PIN. Plenty of apps call themselves vaults without saying where the key comes from.
When a vault is not the answer
If you are worried about a legal case, a vault is not a plan. Talk to a lawyer about your rights, and do not delete anything that may be evidence; that can be a crime on its own. If you simply want private photos kept away from anyone who picks up your phone, including a stranger who finds it, a vault is a reasonable tool.
Two practical notes. The vault backup counts against your own iCloud storage, which our guide on vaults and iCloud storage explains. And if cost is the worry, what a good free photo vault looks like covers the catches to watch for. Vaultpod’s free tier gives 3 vaults and 250 files, and viewing, exporting and deleting stay free forever.