NullKey An Alvento product

How to keep private photos on Android

A hidden album may not encrypt photos, while an encrypted vault protects them with a secret. Check every copy first, then practise restoring sample photos.

Decide what “private” needs to mean

A hidden album keeps photos out of a usual gallery view, but may not encrypt the files. A locked folder adds an access check; an encrypted vault protects stored contents using encryption and a secret. Check the exact behaviour on your Android version and phone.

Check the copies you already have

Before importing, look for copies in your camera roll, messaging apps, downloads and any photo sync service you use. Moving one copy does not remove the others. Keep the originals while you test.

Import and check with sample photos first

Install NullKey from Google Play, create a vault and use Android’s picker to import a few sample photos. Unlock the vault and inspect the photos at full size. Importing keeps originals by default; do not enable removal until you understand which local copies can be affected. The private photo vault feature explains what stays protected. Before removing any original, follow the copy-check steps; to compare locked-folder options, read the Android alternatives guide.

Make a backup you can restore

Create a whole-vault encrypted backup and wait for NullKey’s automatic read-back check to confirm it was saved and checked. Keep the backup away from the phone and its matching passphrase or recovery key separately. Practise restoring sample photos into an empty test vault before entrusting it with anything irreplaceable.

Keep expectations realistic

A vault cannot protect a photo while it is visible on an unlocked or compromised device, remove every copy made by another app, or guarantee secure erasure. Cloud providers and Android features have their own storage and recovery rules.

Frequently asked questions

Is a locked folder the same as an encrypted vault for photos?

No. A locked folder adds a check before access, whereas an encrypted vault scrambles what it stores and relies on a secret. Behaviour differs by Android version and handset, so test on your own device before relying on either.

Should I test a few photos before importing my whole camera roll?

Yes. Import a handful of sample photos first, unlock the vault and inspect them at full size, and keep the originals while you test. Importing keeps originals by default, so an import does not remove them unless you switch on removal.

Will the vault protect my photos if someone has my unlocked phone?

No. A photo visible on an unlocked or compromised device sits outside the vault's protection. The vault locks when the screen turns off, and by default 30 seconds after you leave the app, so lock it yourself before handing the phone over.

Related guides

Keep a separate, checked backup of important files. Restore only into an empty vault and check the result before removing an original.
Get it on Google Play

Download NullKey from Google Play

Open Google Play on your phone

Updated 8 November 2026 · All guides