Scenarios
Shared Family iPad: Keep Your Photos to Yourself
Consumer iPads have no separate user accounts. How to stop your photos syncing to a shared family iPad and keep private photos in an encrypted space.
A family iPad is one user, one Apple Account, and — if it is signed in as you with iCloud Photos on — a full copy of your photo library on the coffee table. The fix has two parts: stop your private library syncing to the shared device, and keep anything sensitive in encrypted storage on your iPhone that does not sync at all.
The situation and the real risk
Families often buy one iPad and set it up with a parent's Apple Account, because that is where the apps and purchases are. Kids watch videos on it, a partner reads the news, guests use it to look something up. Meanwhile, iCloud Photos quietly mirrors every photo you take on your iPhone to the iPad.
That means photos you took privately — of medical issues, documents, gifts you are hiding, personal paperwork — can appear in the iPad's Photos app, in Memories, or in a widget. Hidden photos sync too; the Hidden album is just locked with the iPad's own passcode or Face ID, which the whole family may know.
None of this involves a stranger or an attacker. It is the ordinary result of a device designed for one person being used by several.
What you can do with built-in iOS and iPadOS tools
- Sign the iPad in with a different account. The cleanest solution. Use a family member's Apple Account and Family Sharing to share purchases, so your iCloud Photos never sync there.
- Turn off iCloud Photos on the iPad. Settings > [your name] > iCloud > Photos > off. The iPad will offer to remove the synced photos. Our guide to hiding photos from iCloud explains what stays and what goes.
- Use a Shared Library selectively. iCloud Shared Photo Library lets family members contribute to a common library while keeping a personal one. Be careful with its automatic sharing suggestions.
- Lock the Hidden album on every device. Settings > Apps > Photos > Use Face ID, and turn off Show Hidden Album.
- Lock apps. Long-press an app and choose Require Face ID or Touch ID. Remember that on a shared iPad, others may know the passcode that serves as fallback.
- Guided Access for kids. Settings > Accessibility > Guided Access keeps a child inside one app.
Where built-in tools fall short
iPadOS is single-user. Every lock on the iPad falls back to the iPad's passcode, which on a family device is usually known to everyone. And there is no way to keep a sensitive photo on the iPad that only one family member can open with built-in tools. If you want to understand how easily hidden content can be found, see how to find hidden photos on iPhone — the same steps work on iPad.
How sigil. helps
sigil. is an iPhone app, and that is exactly where it helps in this scenario: it keeps your private photos on your iPhone, out of the library that syncs to the iPad.
- Out of iCloud Photos. Photos stored in a vault are not part of your Photos library, so they never sync to the family iPad, hidden or not. Photos taken with the private camera skip the Camera Roll from the start.
- Local-first. Vaults stay on the device where you created them. There is no account and no cloud copy to appear somewhere else (the flip side: no cloud backup yet, so keep your own).
- Not a passcode the family knows. Each vault is encrypted with a key derived from a sign you draw on a 5×5 grid. See pattern encryption.
- Separate spaces. With multiple hidden vaults, each sign opens its own vault and the app shows no list, so nothing in the app shows how many exist. That also helps when an iPhone, rather than an iPad, is the shared device.
- Low profile. The disguised icon gives the app a neutral utility icon that doesn't say what it is.
If other people often see you unlock things, choose a sign that is not a simple letter or line, and check it with the pattern strength meter.
Family iPad checklist
- Check which Apple Account the iPad is signed in to.
- If it is yours, switch to another account or turn off iCloud Photos on the iPad.
- Set up Family Sharing so purchases are still shared.
- Lock the Hidden album and sensitive apps.
- Move private photos from your iPhone's library into an encrypted vault, so there is nothing sensitive left to sync.
- Delete the originals and empty Recently Deleted, which also syncs.
- Use Guided Access when handing the iPad to young children — see kids with your phone.
Frequently asked questions
Can an iPad have multiple user accounts?
Not for personal use. Shared iPad with multiple users exists for organizations that manage devices, such as schools, but a family iPad has one user and one Apple Account at a time.
Why are my iPhone photos showing up on the family iPad?
Because the iPad is signed in to your Apple Account with iCloud Photos on. Every photo in your library syncs to every device with that setting.
How do I stop my photos appearing on the iPad?
Sign the iPad in with a different Apple Account, or turn off iCloud Photos on the iPad in Settings > [your name] > iCloud > Photos. Removing a device from your account also stops the sync.
Can I use sigil. to keep photos off the family iPad?
Yes. sigil. runs on iPhone and is local-first: photos in a vault are not in your Photos library, so they do not sync to the iPad through iCloud Photos.