What a photo vault can’t protect you from

The short answer

A photo vault protects your photos from people who find the vault closed: someone who picks up your phone, looks through it, or copies its files. It does not protect you from someone who is already inside your phone, someone who sees you open it, someone who can make you open it, or a copy you made yourself and left lying around. No vault app can, ours included. If a vault app says it can, be careful with it.

Knowing the limits is what lets you use a vault well. Here are the five that matter, and what to do about each.

1. Spyware already on your phone

A vault is locked while it is closed. When you open it, your photos are on the screen, and so is everything you type. Spyware that is already on the phone can read the screen, log your keystrokes, or take screenshots. Encryption does not help, because the spyware is watching at the moment the photos are shown. Bishop Vault says this plainly in its own Help, under What it can’t stop.

What to do:

• Keep iOS up to date, and install apps only from the App Store.
• Never give your phone’s passcode to anyone you would not trust with the photos. Someone who knows it can install things.
• If you think someone else has set up access to your phone, accounts, or location, use Apple’s Safety Check. Apple says it is on iPhone with iOS 16 or later, under the heading “Quickly change what you’re sharing.” If the phone itself seems compromised, erasing it and setting it up as new is a stronger step than any app.

2. Someone watching you type

A passcode is only as private as the way you enter it. A person standing behind you, a camera over your shoulder, or a reflection can capture it. Bishop Vault can’t stop someone watching you type your passcode, and neither can any other vault.

What to do:

• Open the vault where nobody can see the screen, and not in a crowded room.
• Use a vault passcode that is different from your phone’s passcode, so that someone who has watched you unlock the phone has not also learned the vault.
• Use a long passcode. A face or fingerprint unlock, where the app offers it, means fewer times you type the passcode in front of others. It has its own limit, covered next.

3. Being made to open it

If someone can force you to unlock your phone, or to unlock the vault, a passcode will not protect you. This is true of every lock you carry. Face ID and Touch ID make it easier for another person to do this, because they only need to hold the phone to your face or your finger. Bishop Vault’s Help puts it this way: anyone who can make you look at your device can open the vault that has Face ID. It is off until you turn it on, and you can choose not to.

What to do:

• Decide before it happens. If this is a real risk for you, do not turn on Face ID or Touch ID for the vault.
• On an iPhone with Face ID, hold the side button and either volume button for about 2 seconds. Let go when the power-off screen appears; holding longer starts Emergency SOS. Bishop Vault’s Help says this turns Face ID off quickly, and it stays off until your iPhone’s own passcode is typed.
• No app protects you from a legal order or a threat. If you are in danger, talk to a lawyer or a local support organization, not to an app.

4. Copies you made yourself

Most leaks are copies. The vault protects what is inside it, and the moment a photo leaves, it is just a photo.

• The original in Photos. When you add a photo to a vault, the original stays in Photos until you delete it. Bishop Vault can offer to delete it for you, and Photos asks you to confirm. Apple says deleted photos stay in the Recently Deleted album for 30 days, so empty that too if you want the photo gone sooner.
• Exports. A photo you export from a vault is no longer encrypted. Bishop Vault says so on the export screen and clears its temporary copy when you tap Done or Back, but any copy you save or send is yours to look after.
• Backups. A backup file made by a vault app is a copy of your vault. Anyone with that file and your recovery kit can open it, with no passcode needed. Keep the file and the kit in different places.
• Your recovery kit. Anyone who holds it can open the vault. A kit left on the printer, in a drawer with your passport, or in a photo on your phone undoes the work the vault does.
• Other apps and clouds. A photo you already sent in a message, or that you saved to another cloud, is outside the vault.

What to do: delete originals you no longer need, keep exports short-lived, and store the kit and any backups apart from the phone.

5. Losing your own way in

A vault with real encryption has no back door, so there is no one to ask. If you forget your passcode and lose your recovery kit, the photos are gone. Bishop Vault says so: no one can open the vault, not even Bishop Vault. This is the price of a vault that nobody else can open.

What to do: print the recovery kit or save the PDF somewhere other than your phone, test that you can find it, and make a new backup after you add things.

The phone itself is the base

A vault sits on top of your phone’s own security. If someone steals the phone and has watched you type its passcode, Apple’s Stolen Device Protection (iOS 17.3 or later, and it must be turned on before the phone is lost) requires Face ID or Touch ID with no passcode fallback for some actions when the phone is away from familiar places, and adds a one-hour wait for changes such as a new Apple Account password. It does not open your vault, but it protects the accounts around it.

What Bishop Vault does protect against

Bishop Vault protects against everyday snooping: a partner, family member, roommate, friend, or thief holding your unlocked phone. It also covers a quick look in Photos or Files, and someone who copies the files off your phone. A copy of the files alone can’t be read. A lab that pulls everything off an unlocked phone, including its Keychain, would still have to guess your passcode, and a long passcode is what stops that. Bishop Vault makes no promise against forensic tools, police, or border searches. No outside security review yet. So what you read here is our own description of it. How it works shows what we do, and the checklist in is a photo vault app safe lets you check any app for yourself.

When you don’t need Bishop Vault

If your worry is a thief or a nosy friend, a long phone passcode with Stolen Device Protection, plus Apple’s locked album in Photos, covers a lot of ground and costs nothing. If your worry is spyware or someone who can force you to unlock your phone, a vault app is the wrong tool, and so is any other app. See the guide to keeping photos private on iPhone for the free options and what each protects, or the comparison with Apple Photos’ locked album.

Facts checked on October 25, 2026

• Apple, how Safety Check works (iPhone with iOS 16 or later): https://support.apple.com/guide/personal-safety/how-safety-check-works-on-iphone-ips2aad8c8e1/web
• Apple, Stolen Device Protection (iOS 17.3 or later): https://support.apple.com/en-us/120340
• Apple, delete photos and the Recently Deleted album (30 days): https://support.apple.com/en-us/104967

Statements about Bishop Vault come from its own Help and About screen.

Keep reading

See how Bishop Vault keeps your things private, or read is a photo vault app safe and the Apple Photos comparison.