Security
The App That Takes a Picture of Whoever Snoops on Your Phone
Mehmet Ali Kısacık · Developer of Secure Folder · July 8, 2026
The suspicion is always the same shape: your phone isn't where you left it, an app is open you didn't open, and someone in the room is a little too casual. You can't prove anything — which is exactly the problem. An intruder alert turns that unprovable feeling into a photo with a timestamp.
An intruder alert: An intruder alert (sometimes called a break-in alert) is a security feature that reacts to failed unlock attempts. When someone enters a wrong PIN, the app silently captures a photo with the front camera and records the exact date and time. There is no flash, shutter sound, or on-screen warning — the person sees an ordinary 'wrong PIN' response while the attempt is logged. iOS itself does not photograph failed unlock attempts, so on iPhone this is a feature of individual apps protecting their own lock screens.
How it works in practice
In Secure Folder: Incogni Vault, intruder alerts guard the vault's lock screen. Every wrong PIN triggers a silent front-camera capture, and each attempt becomes an entry in the intruder log: photo, date, time to the minute. Repeated guesses log as separate entries, so you can tell one curious tap from a determined session. The log lives inside the vault, behind your real PIN — the person who triggered it never knows a record exists.
The photos stay on your device, full stop. Nothing is uploaded, nothing is sent to us, and nothing notifies anyone. You open your vault, check the log, and know.
What an intruder photo can and can't tell you
What it gives you is specificity: who, when, how many times. A blurry ceiling shot means someone triggered it while the phone lay on a table; a clear face at 9:42 on Tuesday is a different conversation entirely.
What it can't do is stop the attempt in the moment or protect anything outside the app it guards. It's evidence and deterrent, not a wall — the wall is the PIN itself. In a layered setup the pieces divide the work: the disguised icon keeps the app from being found, the PIN keeps it closed, the decoy vault handles being forced to open it, and the intruder log covers whatever happens behind your back.
Use it responsibly
An intruder alert photographs a person, and camera and recording laws differ by country and situation. Photographing someone using your own device's lock screen is generally on solid ground, but what you do with the photo — especially publishing it — is on you. Treat the log as a way to know the truth and have a grounded conversation, not as content.
It's also worth saying the quiet part: if the person in your intruder log is a partner who feels entitled to search your phone, the log didn't create that problem — it documented it. The feature buys you certainty; what you do with certainty is the real decision.
Common questions
Does iPhone have a built-in intruder selfie feature?
No. iOS does not photograph failed unlock attempts on the phone's own lock screen. Intruder photos on iPhone come from apps that protect their own lock screens — like a photo vault with intruder alerts.
Will the person know their photo was taken?
No. The capture is silent — no flash, no sound, no message. The wrong-PIN screen looks like any failed unlock. The photo appears only in the intruder log inside the vault.
Where do the intruder photos go?
In Secure Folder they're stored only on your iPhone, in the app's protected storage, like everything else in the vault. They are never uploaded or shared, and only your real PIN reveals the log.
Keep your photos yours.
Secure Folder is free on the App Store — everything stays on your iPhone.