Can someone open my Hidden album without my Face ID?

Yes, if they know your iPhone passcode, because Apple lists the passcode alongside Face ID and Touch ID as a way to open the Hidden album. If Use Face ID is turned off in Settings > Apps > Photos (under Albums on iOS 27), the album has no lock at all.

Short answer

Face ID is only the quick route. The passcode that opens your iPhone opens Hidden too, and Photos has no separate code you can set. So the album stops someone picking up your phone, and it doesn't stop someone who knows your code. If someone might know it, change it.

Who can get past the lock

Anyone with your passcode. Apple's iPhone User Guide lists Face ID, Touch ID or passcode as the ways to open Hidden. Two of its support articles name only Face ID or Touch ID in their steps, so this is easy to miss.
Anyone, if the lock is off. Turning off Use Face ID removes the lock from both Hidden and Recently Deleted. Apple doesn't say whether turning it off asks for authentication.
Anyone with an appearance in your Face ID. Face ID can hold an alternate appearance, and it can open what your own face opens.
Anyone with your Apple Account password. On iCloud.com, Apple's route is Hidden, then Show Hidden Photos, and its page describes no Face ID step.

Steps that make it harder

Open Settings, tap Apps, then Photos (then Albums on iOS 27), and leave Use Face ID on (it says Use Touch ID or Use Passcode on some iPhones).
On the same screen, turn off Show Hidden Album. This removes the album from view, not the photos.
If someone knows your passcode, go to Settings, tap Face ID & Passcode (Touch ID & Passcode on iPhones with Touch ID), and tap Change Passcode.
If someone may have added an appearance to Face ID, go to Settings, tap Face ID & Passcode, tap Reset Face ID, then set up Face ID again. Apple's Personal Safety guide says this deletes alternate appearances.
If someone knows your Apple Account password, change it.

Stolen Device Protection doesn't list Hidden

Stolen Device Protection (iOS 17.3 or later) requires Face ID or Touch ID, with no passcode option, for things like saved passwords and erasing your iPhone when you're away from familiar places. Apple's list doesn't include the Hidden album, Recently Deleted or Photos.

Our conclusion, not Apple's statement: someone with your passcode can open Hidden with this feature on. It still helps, because away from familiar places it puts a 1-hour delay on changing your passcode or Apple Account password.

The one possible exception is locking Photos itself: press and hold the app and look for Require Face ID. Apple doesn't say whether Photos can be locked. A locked app normally falls back to your passcode, but with Stolen Device Protection on, Apple says there's no passcode option away from familiar places.

Where the Hidden album's lock stops

There's one code. Photos can't set its own, though there are other options for a separate password.
Apple doesn't document extra encryption for it. Apple's Platform Security guide (August 2026) never mentions the Hidden album, so think of it as a lock on an album.
It shares its lock with Recently Deleted. One setting covers both, so what you deleted in the last 30 days sits behind it too.

If you're worried about someone who controls your phone or knows your code, Apple's Personal Safety guide is a better place to start.

What LuminaClean does here

LuminaClean is a photo cleaner, and it doesn't hide photos, so it can't change who opens your Hidden album. It helps with the leftovers: the near-identical shots and duplicate copies still in your Library after you hid the one you cared about. It groups duplicates and similar photos on your iPhone, with no account and no upload, and you swipe to keep or delete. Nothing goes without your swipe, and every delete lands in Recently Deleted first. You get 65 free deletes to start, then 30 more every day.

Less to keep private.
LuminaClean finds duplicates, blurry shots and screenshots on your iPhone, and deletes only what you swipe away. Free to start, no account.

Get LuminaClean free

Anything you delete goes to Recently Deleted first, so you have 30 days to change your mind.

On a computer? LuminaClean is an iPhone app. Scan this with your iPhone camera to open it in the App Store.

Text me the link

Related guides

Frequently asked questions

Can I set a different password for the Hidden album?

No. Photos has no password of its own, so Hidden opens with Face ID, Touch ID or your iPhone passcode. The closest Apple option is a locked note with a custom password.

Does Stolen Device Protection protect my Hidden album?

Apple's list of what it covers doesn't include the Hidden album, so our conclusion is that someone with your passcode can still open it. Away from familiar places, it does put a 1-hour delay on changing your passcode or Apple Account password.

Can someone turn off the Hidden album lock without my Face ID?

Apple doesn't say whether turning off Use Face ID asks for authentication. Treat anyone who can open your iPhone as able to reach that setting.

Can someone open my hidden photos on iCloud.com?

Apple's route there is Hidden, then Show Hidden Photos, and its page describes no Face ID step. That makes your Apple Account password part of what protects them.

Can apps open my Hidden album?

With the lock on, the default since iOS 16, Apple's developer documentation says the system doesn't return hidden photos to apps, even if they ask. You can still give an app a hidden photo through the photo picker.

Get LuminaClean free

Sources

Steps checked against Apple Support on November 3, 2026. Menu names can change with iOS updates.