Is Google Photos Locked Folder safe? What it protects, and what it does not

Google Photos Locked Folder is a good way to keep private photos out of sight. But it is built for one specific job, and it is worth knowing where that job ends.

What Locked Folder does

Photos you move to Locked Folder do not appear in your Google Photos grid, memories, search or albums, and other apps on your phone cannot access them (Google Photos Help). You cannot share them or edit them while they are inside.

That covers the most common situation: you show someone your photos, or an app asks for access to your gallery, and the private ones are not there.

It opens with your screen lock

Locked Folder has no lock of its own. It uses your phone’s PIN, pattern, password or biometrics. Google says it directly: people who have access to your device screen lock can unlock Locked Folder.

So Locked Folder does not protect your photos from anyone who knows your screen lock. For many people, that includes a partner, a parent or a child who uses the phone.

Backup: off by default, and your choice

Since August 2023, you can back up Locked Folder to your Google Account and open it on your other devices by signing in to Google Photos (Google). Backed-up items count toward your Google storage.

Backup is not turned on by default. That has a consequence: without backup, Locked Folder photos are deleted if you clear the Google Photos app data, uninstall the app or reset your phone (Google Photos Help). Turn on backup before you switch phones.

Is it encrypted?

Your phone’s storage is encrypted by Android, like every phone that launched with Android 10 or later (Android Open Source Project). Google’s help pages for Locked Folder do not say that the photos get any additional encryption with a key of their own. When Google announced Locked Folder backup, it said backed-up content is protected by Google’s security infrastructure, but it did not describe it as end-to-end encrypted.

In practice, the protection comes from your screen lock and from Android keeping other apps out, not from a separate key that only you hold.

When Locked Folder is enough

• You mainly want photos out of your main gallery and away from other apps.
• Nobody else knows your phone’s screen lock.
• You want the convenience of Google’s backup.

When you need more

• Someone close to you knows, or could learn, your screen lock.
• You want a separate lock just for your private photos.
• You want a decoy that you can open if someone pressures you.
• You want backups that the cloud provider itself cannot read.

For that, you need a vault that encrypts each photo with its own key and has its own lock. Lockspeare is built that way: your PIN or pattern and your phone’s secure hardware protect the key, and backups are encrypted before they leave your phone.

For a comparison of every option, see How to hide photos on Android.