How to password-protect photos & videos on Android

A screen lock protects your phone from strangers. It does nothing once the phone is already unlocked - in your partner's hands, at a shop counter, or when you pass it over to show one photo. To protect specific photos, you need a lock on the photos themselves.

Why the screen lock isn't enough

Think about when your private photos are actually at risk. It's rarely a locked phone on a table. It's the unlocked phone you just handed someone to look at a recipe, or the one your kid borrowed for a game. The screen lock is already open. Every photo is one swipe away.

A second, separate lock on the sensitive albums closes that gap. Even with the phone unlocked, those files stay sealed until a second key is entered.

Option A - Built-in locks (limited)

Some manufacturers let you lock individual albums:

• Samsung Secure Folder - a genuine locked, encrypted container. Solid if you have a Samsung device.
• Google Photos Locked Folder - hides photos behind your screen lock, but it's the same lock, not a separate key, and it's not end-to-end encrypted.

These help, but they're tied to your device lock or your manufacturer, and none offer a decoy for the "open it now" moment.

Option B - An encrypted vault with its own password/pattern

This is the most reliable approach and works on any Android phone. A vault app gives the protected files their own key, independent of your screen lock.

How to set it up (about 60 seconds)

1. Install Umbra from Google Play and open it.
2. Draw a pattern. This becomes the key that encrypts your vault - pick something memorable but not obvious.
3. Import your photos and videos. Each file is encrypted with AES-256-GCM as it enters and removed from your normal gallery.
4. Lock it. Close the app - the keys are cleared from memory and the files on disk are unreadable without your pattern.

Make it survive the "unlock it" moment

If you may ever be asked to open the app in front of someone, set a decoy pattern. It opens a separate, harmless vault - so you can show a screen without exposing your real files. And because Umbra logs failed unlock attempts (and can capture a photo of whoever tried), you'll know if someone went looking.

What a good password-protected setup looks like

• Sensitive photos are encrypted, not just hidden.
• The lock is separate from your screen lock.
• Nothing syncs to a cloud you can't control - ideally the app has no internet permission at all.
• There's a plan for being handed over - a decoy, not just a lock.

Umbra is built around exactly those four points.