How to Safely Hide Photos and Videos on Android 2026

Built-in, free, and end-to-end encrypted ways to hide photos and videos on Android in 2026: Locked Folder, Secure Folder, Cryptomator, ente, and Proton Drive.

Hiding sensitive photos and videos on Android is much simpler than the third-party vault era. Google Photos Locked Folder, Samsung Secure Folder, and the encrypted-cloud option Ente cover the realistic privacy needs for almost any user. The third-party vault apps that dominated app stores in 2020 still exist, but the built-in options are now strong enough that they should be the default. This guide walks through the practical setup for each route, the threat model each one actually addresses, and the pitfalls (lost PIN, accidental cloud sync, forensic recovery) that bite users.

We cover what to use for casual privacy, sensitive material, and the maximum-paranoia scenario, all using current 2026 builds of Android 15 and Android 16.

TL;DR

The pick: For everyday photo hiding, use Google Photos Locked Folder on Pixel and supported devices or Samsung Secure Folder on Galaxy; both are free, integrated, and biometric-protected.

Runner-up: For sensitive material you want backed up with verifiable encryption, use Ente; it is open source, end-to-end encrypted, and offers a usable free tier.

Skip if: Skip third-party vault apps unless your phone lacks both built-in options; the built-ins are stronger and the third-party apps often store unencrypted thumbnails or weaken at the cloud-backup stage.

Google Photos Locked Folder: the default on Pixel and many Androids

Locked Folder lives inside Google Photos and stores selected photos and videos encrypted behind your device biometric or PIN, separate from the regular gallery. The folder does not sync to Google Photos cloud by default (a security improvement over earlier releases); the photos stay only on the device. Available on Pixel devices, Samsung Galaxy with a recent One UI, and most current mid-range Androids.

To set it up: open Google Photos, go to Library, tap Utilities, then Locked Folder. Authenticate with your device biometric or PIN, then move photos into the folder from any album. They disappear from the regular gallery, search, and shared albums.

Samsung Secure Folder: the heavier sandbox on Galaxy

Secure Folder, available on Galaxy phones, goes further than Locked Folder by sandboxing not just photos but an entire encrypted environment: a separate gallery, separate apps, separate accounts, all gated behind a biometric or PIN. It is backed by Samsung Knox, the company’s hardware-rooted security layer.

To set it up: open Settings, search for Secure Folder, tap to enable and choose a lock method. Move photos or videos from the regular gallery to Secure Folder through the share menu or by long-pressing files and selecting Move to Secure Folder. The Secure Folder also gets its own home screen icon you can hide from app drawers.

Ente: end-to-end encrypted cloud backup

Ente is the open-source end-to-end encrypted photo storage service that solves the cloud backup problem. The encryption happens on-device with keys you control; the Ente servers cannot decrypt your photos even with full access to their own infrastructure. The Android app is well-built, the free tier offers 5GB, and paid plans scale to common storage needs.

Use Ente when you specifically want sensitive photos backed up off the device with verifiable encryption. Pair it with the local Locked Folder or Secure Folder for the photos you do not want to leave the device at all; not everything needs cloud sync.

Practical setup: the recommended layered approach

On a current Android phone, the layered setup is: use Google Photos Locked Folder for daily private photos that should stay device-local; use Samsung Secure Folder additionally on Galaxy for photos plus apps you want isolated; use Ente for the small number of photos you need backed up off-device with strong encryption.

Avoid sending sensitive photos through unencrypted messaging or email; Signal supports disappearing messages and on-device encryption, which is the right channel when sharing. WhatsApp encrypts in transit but the cloud backup is the weak point; for sensitive material, prefer Signal.

Common mistakes that defeat the privacy claim

The biggest mistake is leaving the Locked Folder backup setting on while not realizing what it does, or syncing the regular Google Photos folder to cloud where copies linger after you delete the original. Check Google Photos Settings > Backup to confirm what is and is not backed up. Locked Folder content does not back up in current builds; older Android versions did sync it.

Other pitfalls: third-party gallery apps may scan and re-index hidden folders, exposing thumbnails in caches; cloud-based file managers (Files by Google, Dropbox) may catch the encrypted vault container as a single file but cannot inspect it; do not store the master password for Ente only on the device whose photos you are encrypting.

The setup, step by step

  1. 1

    Enable device biometric and screen lock

    Locked Folder, Secure Folder, and Ente all require a strong device lock. Use fingerprint and a 6-digit PIN minimum.

  2. 2

    Pick the right local vault

    Google Photos Locked Folder on most Androids, Samsung Secure Folder on Galaxy if you want the heavier sandbox.

  3. 3

    Move sensitive photos out of the regular gallery

    Long-press, choose Move to Locked Folder or Secure Folder.

  4. 4

    Verify cloud backup behavior

    Open Google Photos backup settings and confirm the Locked Folder is not syncing; same for Samsung Cloud and Secure Folder.

  5. 5

    Install Ente for off-device backup

    Create an account, enable end-to-end encryption (default), and sync only the photos you want backed up.

  6. 6

    Back up your Ente recovery key

    Store the Ente recovery key somewhere not on the same device, such as a password manager or a paper note in a safe.

Pick your hiding strategy

  • Casual privacy: Google Photos Locked Folder, nothing else needed.
  • Samsung user wanting deeper isolation: Secure Folder, optionally plus Locked Folder.
  • Sensitive material needing cloud backup: Ente, optionally plus the local vault for non-backed-up items.
  • Maximum paranoia: Ente plus a hardware security key plus offline cold storage.
Important: Forgetting your PIN or losing your recovery key locks you out of vault contents. Vault apps and encrypted storage services do not have password recovery by design. Choose a PIN you will not forget and back up recovery keys in a separate location.

FAQ

Does Google Photos Locked Folder sync to cloud?

No in current builds (2026). It stays local to the device. If you also want cloud backup, use an explicit end-to-end encrypted service like Ente.

Can someone with my phone access my hidden photos?

Not without the biometric or PIN. The hidden photos are protected by the device’s secure enclave. Forensic recovery is possible in theory but unlikely without a determined attacker and physical possession.

Is Samsung Secure Folder safer than Google Photos Locked Folder?

Secure Folder offers a heavier sandbox with separate apps and accounts. For photos alone, both are sufficient. Secure Folder wins for users who want broader isolation.

How do I share a hidden photo without exposing the rest?

Open the Locked Folder, share the specific photo via Signal or another encrypted channel. The photo leaves the vault for the share; the rest stay protected.

Is hiding photos on Android the same as encrypting them?

Locked Folder and Secure Folder use device encryption backed by the secure enclave. Cloud-synced content needs explicit end-to-end encryption (Ente) to be truly encrypted in transit and at rest.

The verdict

Hiding photos on Android is a solved problem if you use the built-in tools. Locked Folder handles casual privacy on most Androids; Secure Folder adds isolation for Galaxy users; Ente provides verifiable end-to-end encrypted cloud backup when you need it. Skip third-party vault apps unless your phone lacks the built-in options. Layer the tools to match your threat model and remember to back up the recovery keys somewhere other than the phone whose photos you are protecting.