Vault Apps and Hidden Apps on a Child’s Phone: How to Spot Them

What “hidden” and “vault” apps actually are

A vault app is an ordinary download from the App Store or Google Play that stores photos, videos, notes or other apps behind a code. Many are disguised: the icon and first screen look like a calculator or a clock, and typing a code such as 1234= opens the vault. Some offer a decoy code that opens a second, harmless set of photos.

Phones now include hiding features of their own. Since iOS 18, iPhones can lock any app behind Face ID and hide most apps in a locked folder. Android 15 added private space, a separate locked area for apps. Samsung phones have had Secure Folder for years. Any Android phone can have a second user profile, and messaging apps can be cloned to run a second account. Adults use all of these, often for good reasons.

The most common “hidden” app is also the least dramatic: an app removed from the home screen but still sitting in the full app list.

Finding hidden apps on an iPhone

On iOS 18 and later, touching and holding an app gives a Require Face ID option. From there the app can simply be locked, so it stays on the home screen but needs Face ID or the passcode to open. Or it can be hidden. A hidden app leaves the home screen and search, stops showing notifications, and moves into a Hidden folder at the very end of the App Library. Hidden apps are also left out of lists in the Settings app.

So on an iPhone, the check is simple but limited. Scroll to the bottom of the App Library and see whether there is a Hidden folder. You can see that it exists, but only the phone’s owner can open it with their Face ID or passcode. That means asking.

Two other places help. The App Store’s purchase history lists apps downloaded with the Apple Account, including ones no longer on the home screen, though purchases can themselves be hidden. The Photos access list, under Settings › Privacy & Security › Photos, shows every app that can read the photo library. A calculator on that list needs an explanation.

Finding hidden apps on Android and Samsung phones

Android varies by manufacturer, but the order of checks is the same.

1. The Settings app list. Settings › Apps › See all apps shows nearly every installed app, including ones hidden from the home screen by the launcher. Sorting by size is useful: a calculator using several gigabytes is not just a calculator.
2. Launcher hidden apps. Samsung’s home screen can hide apps. In Home screen settings, look for “Hide apps on Home and Apps screens”. Other launchers have similar options with different names.
3. Private space. On Android 15 and later, a private space sits at the bottom of the app drawer behind its own lock. It can be hidden when locked, in which case searching “private space” in the app drawer brings up the unlock prompt. When locked, its apps are kept out of Settings, recent apps and notifications. That’s the point of it.
4. Secure Folder, users and clones. On Samsung phones, Secure Folder is under Settings › Security and privacy › More security settings, and its icon can be hidden. Samsung’s Dual Messenger, under Advanced features, runs a second copy of a messaging app. Any Android phone can also have extra users, listed under Settings › System.

How to spot a calculator vault

Vault apps are designed to survive a quick look, so check what the app does rather than how it looks. Signs worth a closer look:

• Two calculator apps, or one that isn’t made by the phone’s manufacturer.
• Size. A real calculator takes a few megabytes. A vault full of photos can take gigabytes.
• Permissions. A calculator has no reason to access photos, the camera or files.
• The store listing. Open it from the download history. Words such as “vault”, “hide photos” or “private” settle the question.

Some of these apps also send the vault’s contents to their own cloud storage, which means deleting the app doesn’t necessarily delete the pictures. That matters if the vault turns out to hold images someone pressured your child into taking.

How to find hidden vault apps on a child’s phone, step by step

Tell your child in advance that you’ll do this together, and why. Then work through the phone in this order: home screen against the full app list, download history, storage by size, photo and camera access, and the built-in private areas. Finish by talking about anything you found.

Skip “hidden app detector” apps. Most ask for wide permissions and show nothing the Settings app doesn’t. A few are adware. And don’t expect the check to be complete. A locked private space, a hidden iPhone folder or an app on a friend’s phone are beyond what any parent can see without the child’s help.

Scale the check to your child’s age. For a 10 or 11-year-old with a first phone, a full check now and then is reasonable. For a 15-year-old, a locked folder or private space is closer to a diary in a drawer, and checking it routinely does more harm to trust than good. At that age, save checks for when you have a specific reason, and tell them what the reason is.

Stopping the next one: approvals rather than searches

It is much easier to see a vault app when your child asks to install it than to find it afterwards. On iPhone, Family Sharing’s Ask to Buy sends download requests to a parent. On Android, Google Family Link lets you approve apps from Google Play and see what is installed. Read the store listing when a request comes in. Vault apps often carry a low age rating and a harmless icon, but the description gives them away.

Neither tool catches everything. Apps installed before approvals were on, apps installed outside Google Play and second accounts all slip past. If you’re setting these tools up for the first time, our beginner’s guide to parental controls covers each platform.

If you find one: what to do next

Start with a question, not a verdict: “What do you use it for?” Most of the time the answer is ordinary. Selfies a younger sibling shouldn’t see. A diary. A game you said no to. Agree what is reasonable to keep private, and what you need to be able to see.

Sometimes a vault holds an app or account your child knew you’d refuse, such as a social app below its minimum age or a second account. That calls for a talk about the rule, and whether it should change as they get older.

Rarely, it holds images of your child that someone asked for, or messages from an adult putting pressure on them. Stay calm. Don’t copy, forward or save the images anywhere, even to report them, because that can itself be an offence. Don’t delete the vault either, as the police may need it. Contact the police if an adult is involved, and tell the school’s safeguarding lead. Many countries have a reporting service that helps under-18s get sexual images of themselves taken down.

What no parent can see

Some families use a monitoring app for app rules across the phone. Ours is installed with the child’s knowledge and stays visible on the phone. It lists apps on the main profile, shows new installs and can limit or block an app by agreement. It can’t see inside a vault, a Secure Folder, a private space or an iPhone’s Hidden folder, because nothing legitimate can. For new downloads, Ask to Buy and Family Link, both free, do most of the work.

How this page was put together

We checked hiding features against Apple’s iOS 18 documentation, Android’s private space documentation for Android 15 and later, and Samsung’s Secure Folder support page, in September 2026. Launcher labels differ between manufacturers and software versions, so we give the mechanism alongside each path.

We did not test individual vault apps, and we don’t name or rate them. Behaviour such as decoy codes and cloud upload varies from app to app. Our editorial standards explain how we check and correct guides.