How to Set Up an Encrypted Private Folder Profile on Android

My phone carries photos from family trips, scans of identity documents, work contracts, and notes I would never want a stranger to scroll through. For years I relied on the main screen lock and told myself that was enough. It was not. A borrowed phone, a repair shop visit, or a child tapping through the gallery can all expose files that the lock screen was never designed to guard. A private folder profile fixes that gap by giving sensitive files a separate home with its own lock, its own apps, and its own encryption.

This guide walks you through the whole setup on a real phone: choosing between Private Space, Samsung Secure Folder, and a work profile, picking a lock that is genuinely different from your screen lock, moving files without leaving copies behind, and testing the result like someone trying to break in. I tested each method on my own devices over several weeks, including the mistakes, so you can skip the ones I already made.

By the end you will have one locked space that hides its contents from the gallery, from recent files, and from the app drawer, plus a backup plan for the day you forget the code. Set aside about an hour, start with a single test photo, and move the real files only after the test passes.

What an encrypted private folder profile is on Android

A private folder profile is a separate user space on the same phone. It has its own apps, its own files, and its own lock. When the profile is closed, its apps stop running and its files vanish from the main gallery, the main file manager, and recent-files lists. When you open it with its own PIN, password, or fingerprint, everything inside becomes available again. That separation is the whole point: the main profile and the private profile behave like two phones sharing one body.

Encryption is the layer underneath. Android encrypts files at rest with file-based encryption, which scrambles file contents with keys tied to the device and to your credentials. A locked private folder adds access control on top of that encryption: even if someone copies a file out of the folder, they still face the encryption and the profile lock. The two layers do different jobs, and you want both.

Private Space, Secure Folder, and work profile compared at a glance

Android 15 introduced Private Space, a built-in locked area that lives inside Settings and hides its apps from the launcher until you open it. Samsung phones have Secure Folder, which is backed by the Knox hardware platform and can hold apps, photos, documents, and even a second copy of a messaging app. A work profile, created by your employer or by an app such as Shelter, creates a managed second profile with its own apps and files. All three hide content when locked, yet they differ in setup effort, in how deeply they hide apps, and in which phones support them.

Here is the catch: no method protects files you already shared. A photo sent to a friend, uploaded to a shared album, or backed up to a cloud account already left the phone. A private folder guards what stays on the device from this point forward. Treat it as a fresh start, not as a way to recall files that already travelled.

How file-based encryption fits into the private folder

File-based encryption means each file is scrambled with its own key, and those keys stay protected while the phone is locked. On a phone with file-based encryption active, a thief who pulls the storage chip out still faces scrambled data. You can confirm encryption is active in Settings under Security, or with a quick read-only check from a computer: run adb shell getprop ro.crypto.state and look for an encrypted state. That check changes nothing on the phone; it only reports what is already true.

What a private folder does not do for you

A private folder does not hide your activity from the phone maker, from your carrier, or from an app you installed inside the private space itself. An app running inside the private profile can still see the files you give it, and it can still send data over the network if you grant it permission. The folder is a wall between your two profiles, not a wall between your phone and the internet. Keep permissions inside the private space just as tight as outside it.

It also does not protect you from yourself. If you move a photo into the private folder and then share it from inside the folder to a chat app, the shared copy escapes the protection at once. The habit matters as much as the tool, which is why the daily routine section at the end of this guide matters more than it looks.

Private Space vs Secure Folder vs work profile: which one fits your phone

The fastest way to decide is to check what your phone already offers. Open Settings and search for “Private Space” first. If your phone runs Android 15 or later, it is probably there. Samsung owners should search for “Secure Folder” instead, since Samsung ships its own version. If neither appears, a work profile app is the fallback, and it works on a much wider range of phones.

On my Pixel, Private Space won because it is built into the system, it hides its apps completely when locked, and it needs no extra account. On my Samsung test phone, Secure Folder won because it moves photos and documents with two taps and its Knox backing adds hardware-level isolation. If you own a phone from another brand running Android 14 or older, the work profile route is the honest answer, and it is better than a random vault app from an unknown developer.

How to check what your phone supports in two minutes

Open Settings, tap the search bar at the top, and type “Private Space”. If a result appears, your phone supports it. Type “Secure Folder” next if you own a Samsung. Type “work profile” or open Settings, then Accounts, and look for a work account option. Two minutes of searching saves you from installing an app you never needed, and it tells you which section of this guide to follow first.

That said, do not install three different vault apps while you decide. Each extra vault is another lock to forget and another app with access to your files. Pick one method from the table above, set it up properly, and only add a second tool if the first one leaves a specific gap you can name.

Before you start: pick a lock, back up, and plan recovery

The lock you choose decides how strong the whole setup is. A four-digit PIN that matches your birthday is barely a lock at all, and a pattern drawn as a simple L shape is easy to guess from smudge marks on the screen. Use a code that is different from your main screen lock, different from your banking PIN, and long enough that a casual guess fails. Six digits is a reasonable floor; a short passphrase is stronger still.

Back up the files you plan to move before you move them. Copy the important documents to an encrypted archive on a computer you trust, or to a password manager that holds secure notes. A private folder on one phone should never be the only copy of an irreplaceable file. If the phone is lost, damaged, or locked out, that backup is the difference between an inconvenience and a disaster.

Choose a lock that is different from your screen lock

Open a note on paper, not on the phone, and write down the kind of lock you will use and where the recovery details live. A person who knows your main PIN should not gain automatic access to your private space, so the two codes must differ in both value and length. If your screen lock is a six-digit PIN, make the private lock a passphrase or an eight-digit PIN with no repeating pattern.

Turn on fingerprint access only when you trust the sensor on your phone. A fingerprint speeds up daily use and removes the temptation to pick a weak PIN for convenience. Keep the PIN or password as the fallback, because a sensor can fail after a restart, with wet hands, or when the phone demands the code after a long idle period. Test the fallback on day one, while you still remember the code easily.

Write down your recovery plan before you move real files

Recovery planning is dull and it is the step most people skip. Write the lock type and the backup location on paper and keep that paper somewhere only you can reach, such as a locked drawer at home. A note that lives only inside the locked phone cannot help you when the phone itself is the problem. Check whether your chosen method offers a recovery option, such as a Samsung account reset for Secure Folder, and decide in advance whether you trust that option.

How to build a small test kit for the move

Pick one test photo, one test document, and one test note. Use files you can afford to lose, such as a screenshot of a weather forecast and a blank document. Move only these three files first, then run every verification check in this guide. When the test files behave exactly as expected, move the real files in small batches and verify after each batch. A slow move with checks beats a fast move that leaves copies scattered across the gallery.

This habit also protects your phone in a wider sense, because a private folder works best as one part of a routine that includes strong passwords, careful permissions, and regular updates. Read the guide on daily security habits that keep a phone safe before you treat the folder as a finished job, and keep the separate lock for the private space as the centre of that routine.

Set up Private Space on Android 15 step by step

Private Space is the cleanest option on a Pixel or any phone that shipped with Android 15. It creates a locked area in the app drawer that disappears entirely when closed, and it gives that area its own Google account if you want one. Follow the steps in order and test after step five, before you move anything real.

1. Open Settings, then tap Security and privacy, then tap Private Space. If you cannot find it, use the Settings search bar and type “Private Space”.
2. Tap Set up, read the short explanation, and tap Continue. The phone will create the space, which takes under a minute.
3. Choose a lock for the space. Pick “Use a new lock” rather than reusing your screen lock, then set a PIN, pattern, or password that differs from the main one.
4. Decide whether the space should hide itself when locked. Turn on “Hide Private Space when locked” so the area vanishes from the app drawer until you open it again.
5. Choose how the space behaves when the phone restarts. Set it to stay locked after a restart, so a reboot never leaves the space open.
6. Add one test app to the space. Long-press an app in the drawer, or open Private Space and tap the plus icon, then install or move a single app such as a notes app.
7. Open the test app inside the space, create one test note, then lock the space from the Private Space screen.
8. Check the main drawer, the gallery, and recent files. The test app and its note should be gone from every main-profile view.

If step eight fails and the test app still appears, check whether the space actually locked. Some phones show a brief delay before the space closes, and an app left open in the background can keep the space active. Close the app first, lock the space, wait ten seconds, and check again.

How to verify Private Space is really locked

Verification is a habit, not a one-time event. Lock the space, hand the phone to a trusted friend, and ask them to find the test app. A fresh pair of eyes will tap the places a stranger would tap first and will notice a preview you overlooked. Repeat this check after every system update, because updates sometimes reset visibility settings.

Also check the share menu. Open a photo in the main gallery, tap Share, and look at the suggested apps. Apps from the private space should not appear there while the space is locked. If one does, remove it from the share suggestions or keep the space locked whenever you share files from the main profile.

What to do when Private Space asks for the code too often

If the space demands the code every time you switch apps, add your fingerprint as the fast path and keep the PIN as the fallback. If fingerprint access still feels slow, check whether battery optimisation is putting the space to sleep aggressively. A space that sleeps too deeply can feel broken when it is only saving power. Adjust the battery setting for the Private Space system component and test again for a day.

Set up Samsung Secure Folder step by step

Secure Folder is the most polished option in this guide, and it is the one I recommend to Samsung owners without hesitation. It is backed by Knox, it moves files with a built-in Move to Secure Folder action, and it can run a second copy of apps such as WhatsApp or a gallery. Setup takes about ten minutes.

1. Open Settings, tap Security and privacy, then tap Secure Folder. If it is missing, search for it in the Settings search bar.
2. Sign in with your Samsung account when asked, then tap Continue and wait for the folder to be created.
3. Choose the lock type. Pick PIN, pattern, or password, and make it different from your screen lock. Add your fingerprint as well for daily convenience.
4. Turn on “Show Secure Folder on Apps screen” only if you want a visible icon. For stronger privacy, hide the icon and open the folder from Settings instead.
5. Set the auto-lock behaviour. Choose “When screen turns off” or “After 5 minutes” so the folder never sits open after you put the phone down.
6. Open Secure Folder, tap Add files, and move your single test photo first. Confirm it disappears from the main gallery.
7. Tap Add apps and add one test app. Open it inside the folder, sign in if needed, and confirm it does not appear in the main drawer.
8. Lock the folder from its menu, then check the main gallery, the main file manager, and recent files for any trace of the test items.

Secure Folder has one behaviour worth knowing: files moved into it are encrypted with Knox keys, and deleting the folder deletes its contents. That is a safety feature and a risk at the same time. Back up the important files before you rely on the folder as their only home.

How to move photos and documents into Secure Folder safely

Use the Move action, never Copy, when the app offers both. A copy leaves the original in the gallery, which defeats the purpose entirely. After each move, open the main gallery and search for the file name. If the original still appears, delete it by hand and then empty the gallery trash, because a file in the trash is still recoverable for thirty days on most phones.

Check the Downloads folder too. Files downloaded from a browser or a chat app often live in Downloads even after you move a copy from the gallery. Search Downloads for the same file names and delete any copies you find there. A private folder only protects you when the unprotected copy no longer exists anywhere on the phone.

Set up a work profile when your phone has no built-in option

A work profile is the fallback for phones without Private Space or Secure Folder. Apps such as Shelter create a managed profile that behaves like a second phone, with its own apps and files. Install Shelter from a trusted source, open it, and follow its setup to create the work profile. The phone will ask for permission to create a managed profile; accept it and wait for the setup to finish.

Once the profile exists, install the apps you want inside it from the work-profile version of the Play Store, or use Shelter to clone an app into the profile. Freeze the profile when you are not using it: frozen apps stop running and their files disappear from the main profile views. The trade-off is clear. Setup takes longer than the built-in options, and some launchers show a work tab in the drawer. In practice, that tab is a small price for a properly separated space on a phone that offers nothing built in.

Move photos, files, and apps without leaving copies behind

Moving is where most private-folder setups quietly fail. People move a photo, see it inside the folder, and assume the job is done, while the original still sits in the gallery, in the trash, in a thumbnail cache, or in a cloud backup. A careful move checks every one of those places. Move in small batches, verify after each batch, and keep a simple checklist on paper until the routine feels automatic.

Start with the gallery. Move ten photos, then open the gallery and search for one of them by name or date. Open the trash and confirm it is empty. Open the file manager, go to DCIM and Pictures, and confirm the files are gone. Only then move the next ten. The same routine applies to documents in Downloads and to voice notes in a recorder app.

Files by Google Safe Folder for phones without a built-in vault

If your phone has no built-in private space at all, Files by Google offers a Safe Folder that locks individual files behind a four-digit PIN. Open Files by Google, tap Safe Folder, set a PIN, and move files into it with the Move action. It is a simpler tool than a full profile: it hides files, yet it cannot hide whole apps, and a four-digit PIN is weaker than a passphrase. Use it as a stopgap for a handful of sensitive files while you set up a work profile for the real separation.

The Safe Folder has one rule worth respecting. If you forget the PIN, Google cannot recover the files for you, and clearing the app data deletes the Safe Folder contents. Write the PIN in your password manager the moment you set it, and keep a backup of the files outside the phone.

Clear thumbnails, trash, and cloud copies after a move

Thumbnails are the most common leak. A gallery app builds small preview images for speed, and those previews can survive after the original moves into a private folder. After a large move, open Settings, then Apps, then your gallery app, then Storage, and tap Clear cache. Do the same for the file manager. Then open the gallery trash and the cloud trash, such as Google Photos trash, and empty both.

Check shared albums as well. A photo that already lives in a shared album stays visible to the other members even after you move the phone copy into a private folder. Open the shared album, remove the private photo, and empty the album trash if the option exists. A shared album copy on a server can outlive the phone copy for weeks, so this check matters more than it looks.

Search for leftover copies by file name

The most reliable check is a plain search. Open the file manager, search for the file name of a photo you just moved, and look at every result. Then search for a distinctive word from a document you moved. If any result appears outside the private space, delete it and empty the trash again. Repeat the search after installing any new gallery or file manager app, because a new app can build its own thumbnail cache that bypasses the old protection.

Hide the private apps, test the lock, and build the daily routine

A locked folder is only half the job. The other half is making sure nobody notices the folder exists and nobody can guess its lock. Hide the folder icon when your phone allows it, remove private apps from the home screen, and keep the folder out of the share menu. The guide on ways to hide secure apps from the launcher drawer covers the drawer tricks in detail, including launcher settings that keep private apps out of search results and out of the recents screen, so pair it with a hidden folder icon for the strongest result.

Test the lock like an outsider would. Lock the space, hand the phone to a friend, and watch what they tap. Ask them to open the gallery, the file manager, and the app drawer. Ask them to try the share menu from a photo. Every place they find a trace is a place you need to fix. I found a thumbnail leak this way on my own phone, in a gallery cache I had never opened, and that single test was worth more than a week of reading settings screens.

Common mistakes that undo a private folder

The biggest mistake is using the same PIN for the main lock and the private folder. One guess then opens both layers, and the whole setup becomes decoration. The second mistake is moving files with Copy instead of Move and leaving the original in place. The third is forgetting the trash, where deleted originals sit recoverable for weeks. The fourth is taking a screenshot of a private document while the folder is open, because the screenshot lands in the main gallery by default. Change the screenshot habit or move screenshots into the folder immediately after taking them.

Another mistake is trusting biometrics alone. A fingerprint is convenient, yet a restart, a wet finger, or a sensor fault can demand the PIN at the worst moment. Know your PIN by heart, keep it in a password manager as a backup, and test the PIN path once a month so it stays familiar.

Troubleshooting when the private space will not open or will not lock

If the space will not open, restart the phone first. A restart clears a stuck lock state and forces the space to ask for the code again, which is the secure behaviour you want. If fingerprint access fails repeatedly, delete the fingerprint and re-register it, then test the PIN path before relying on the sensor again. If the space will not lock, check whether an app inside it is still running in the background; close it, then lock the space and wait ten seconds before checking.

If you forgot the lock entirely, look for the recovery option you set during setup. Samsung Secure Folder can reset through a Samsung account in some regions. Private Space has no password recovery by design, which is why the paper note and the outside backup matter so much. If no recovery exists, the honest answer is that the files inside may be lost, and that loss is the price of a lock that cannot be bypassed. That is also why the backup step comes before the move step in this guide.

Stay alert to wider threats too, because a private folder cannot stop a malicious app that you install yourself. Read the guide on early warning signs of ransomware on a phone so you can spot a dangerous app before it encrypts the files you worked so hard to protect. A locked folder plus a wary eye beats either one alone.

Encrypted private folder questions answered

Does a private folder encrypt my files automatically?

A built-in private space benefits from the phone’s file-based encryption, yet the exact protection depends on your phone model and on whether encryption is active. Check Settings, then Security, and confirm that encryption is turned on. For highly sensitive documents, add an encrypted archive as an extra layer inside the folder, so the file carries its own protection even if the folder is somehow opened.

Can I recover files when I forget the private folder lock?

Recovery depends on the method you chose. Secure Folder offers a Samsung account reset in some regions, while Private Space offers no recovery by design. A password manager entry and a backup outside the phone are the only reliable safety nets. Set both up before you move important files, not after you need them.

Will private apps appear in the main app list?

Apps inside a locked Private Space or Secure Folder should not appear in the main drawer while the space is locked. Some launchers show a separate work tab when the profile is active, and some show a badge on cloned apps. Test the drawer while the profile is locked to confirm the behaviour on your own phone, and hide the folder icon if your phone allows it.

Is a work profile as safe as Samsung Secure Folder?

A work profile gives real separation between profiles, with its own apps and files, yet it lacks the hardware-backed Knox isolation that Samsung builds into Secure Folder. For most personal use, a work profile is strong enough, especially when combined with a different lock and a careful move routine. If you need the strongest isolation on a Samsung phone, use Secure Folder. If you need separation on any other phone, a work profile is the best available answer.

A private folder that actually stays private

An encrypted private folder profile works when three things are true at once: the lock differs from your screen lock, the files moved with no copies left behind, and a backup exists outside the phone. Miss any one of those and the setup is theatre. Get all three right and the folder becomes a quiet, reliable vault that you barely notice until the day it matters.

Your next step is simple and takes fifteen minutes. Create the private space today, move one test photo into it, and verify that the original is gone from the gallery, the trash, and the file manager. When that test passes, move the real files in small batches and retest after each one. A private folder is not a feature you install; it is a habit you keep.