The direct answer
Anything protected by your iPhone passcode or Face ID is open to someone who knows the passcode. That includes the Hidden album, Recently Deleted, locked notes that use the device passcode, and vault apps that unlock with Face ID. To keep something private from a person with your passcode, it has to sit behind a second secret they do not know.
What they can see
- The Hidden album. It asks for Face ID, and Face ID falls back to the passcode.
- Recently Deleted, the same way.
- Notes locked with the device passcode.
- Any app they can open with your passcode, and any vault app with Face ID unlock turned on.
- Your iCloud Photos on any shared device signed in to your Apple Account.
What to do now
- Put private photos and videos in a vault with its own passcode, and do not enable Face ID unlock for it. Kryptis unlocks with a vault passcode you choose; Face ID is optional and off by default.
- Delete the originals from Photos, then from Recently Deleted.
- Set up a Decoy Vault. If you are ever asked to open the app, you open the decoy.
- Turn on Intruder Alerts so you know if someone tried a code while you were out.
- Turn on Auto-Lock so the vault does not stay open in the background.
What not to rely on
A different Hidden album trick, a shortcut, or a calculator icon. None of them add a secret. If the person has your passcode, they have everything that passcode opens, and a disguise only delays the question.
What Kryptis covers
The vault is encrypted on the phone with AES-256-GCM and opens only with the vault passcode. The Decoy Vault gives you a real vault to open under pressure. Self-Destruct Mode gives you a way out if it comes to that.
What Kryptis does not solve
The relationship. If someone is going through your phone, a vault protects the files; it does not change why they are looking. If you are worried about your safety, a domestic abuse helpline can talk through options that go beyond a phone.
