An app lock protects you in exactly one situation: when your phone is unlocked and someone else is holding it. That turns out to be a big situation. Your passcode guards a locked phone brilliantly — but the moment you unlock it and hand it over to show a photo, everything on it is open. Photos, messages, email, banking apps that stay signed in, and every document you've ever scanned.

A second lock on the apps that hold sensitive things closes that gap. Here's what it genuinely protects, what it doesn't, and how to set it up on an iPhone today.

What your passcode already covers

Modern iPhones are genuinely well protected while locked. Your passcode isn't just a gate — it's tied into how the phone encrypts its storage, which is why a locked, up-to-date iPhone is a famously hard target. If your phone is stolen while locked, a good passcode is doing serious work.

Two honest caveats:

  • The passcode is a master key. Anyone who knows it can unlock the phone, and — this surprises people — can often reset your Apple Account password and change Face ID from Settings. This is why security folks wince at typing a passcode in a crowded bar.
  • The passcode only matters while the phone is locked. And your phone spends much of its useful life unlocked, in your hand or someone else's.

That second point is the whole reason app locks exist.

The handed-phone problem

Think about the last week. You handed your unlocked phone to a friend to show one photo, and they swiped. A kid played a game on it in a waiting room. A coworker borrowed it to look something up. A mechanic held it to read a confirmation number.

None of these people are villains. But an unlocked phone is an open house: notifications drop in with message previews, the Photos app is one tap away, and a curious swipe through your camera roll can surface things you forgot were there — including documents. If you've ever photographed a passport, an insurance card, or a paycheck "just to have it," it's sitting in your camera roll between the vacation shots. (If most of your documents live in a scanner app instead, it's worth knowing where those scans actually go — the answer varies more than you'd expect.)

Then there's the app switcher. Swipe up and pause, and iOS shows a live snapshot of every recent app — whatever each one was displaying when you left it. Leave a tax document open, and it's visible right there in miniature, no tap required. Most apps don't hide these previews.

What a second lock does — and doesn't do

Worth being precise here, because app locks get oversold.

What an app lock genuinely protects against:

  • The friend, kid, or coworker holding your unlocked phone
  • A phone grabbed or left unattended while unlocked
  • Your own accidents — opening something sensitive with someone reading over your shoulder
  • App-switcher previews, if the app hides them

What it doesn't protect against:

  • Anyone who knows your passcode — every Face ID lock on an iPhone falls back to the passcode, so a lock is only as strong as the passcode behind it
  • Data the app has already sent to a server (a lock on your screen says nothing about what happens elsewhere)
  • A weak passcode, period

So an app lock isn't a vault door bolted onto a tent. It's a real fix for a real, everyday exposure — the unlocked phone — layered on top of a passcode that still has to be good.

Locking things down with what's built into your iPhone

You can close most of the handed-phone gap today, for free:

  1. Lock individual apps. On iOS 18 or later, touch and hold an app icon and choose Require Face ID. That app now demands Face ID (or your passcode) every time it opens, hides its content from the app switcher, and stops surfacing in search. You can also choose Hide to move it into a locked, hidden folder.
  2. Lock sensitive notes. In the Notes app, swipe left on a note and tap the padlock. Handy if you keep policy numbers or account details in text.
  3. Use Guided Access for hand-offs. Turn it on in Settings → Accessibility, then triple-click the side button before handing your phone over. The borrower is pinned inside that one app until you unlock.
  4. Tame lock-screen previews. Settings → Notifications → Show Previews → When Unlocked, so message contents don't display on a locked screen.

The honest weakness: these are settings you have to remember to apply, app by app, and your documents are still scattered — some in Photos, some in Files, some in a notes app. The lock is only as complete as your memory of where everything lives. If your insurance cards, IDs, and receipts are spread across three apps, gathering them into one place is half the security work by itself.

How Paperlock handles this

Paperlock is a document vault, so the second lock isn't a setting — it's the front door. Here's exactly what it does, no more claimed than is true:

  • Locks with Face ID or your passcode on open, every time.
  • Relocks after about a minute in the background. Switch to Messages, get distracted, hand the phone over — the vault has already closed behind you.
  • Hides its contents in the app switcher. No miniature tax return in the preview card.
  • Blurs the sensitive stuff even inside the app. IDs, passports, and medical documents show blurred thumbnails until you re-confirm with Face ID — so scrolling your vault next to someone on a plane doesn't flash your passport photo at them.
  • Stores documents encrypted on the phone using iOS Data Protection, the same foundation your passcode already anchors.

What Paperlock's lock does not do is make a weak passcode strong — nothing does. And a lock on the vault doesn't cover a document after you send it somewhere else, which is its own topic: sharing documents securely from an iPhone deserves the same thought as storing them.

The other half of Paperlock is that the vault is worth opening: it reads every document you save and answers plain-English questions like "when does my passport expire?" — here's how that works. It's coming soon to iPhone.

The five-minute version

  • Your passcode protects a locked phone. Make it strong, and shield it when you type it in public.
  • App locks protect an unlocked phone — the friend, the kid, the borrowed minute. That's not paranoia; it's most of real life.
  • On iOS 18+, touch and hold any sensitive app and choose Require Face ID.
  • Check your app switcher right now. If a document is visible in a preview card, that app isn't hiding its snapshot.
  • Documents scattered across Photos, Files, and notes can't all be locked at once. Getting them into one place — locked, and ideally one that remembers what they say — is the durable fix.