Protecting personal data on Xiaomiβs smartphone is a key challenge for users who store sensitive files, such as document photos, screenshots of correspondence or work materials. Unlike iOS, where Hidden Albums are built into the system, owners of MIUI devices have to choose between standard tools and third-party solutions. The problem is complicated by the fact that after the interface updates, the security menu often moves, and some features (for example, Secured Storage) may not be available on budget models like the Redmi 10A or POCO M4 Pro.
In this article, we will discuss all the current ways to protect folders on Xiaomi, Redmi and POCO smartphones (including devices from 2023-2026 on MIUI 14/15 and HyperOS): from built-in encryption to applications with support for biometrics. Particular attention will be paid to bypassing restrictions on models without the βPrivate Safeβ function and the nuances of working with the Mi Cloud storage. If you need not just hide the folder, but completely exclude access to it even through the file manager, read the section on encryption using 7-Zip.
1. Built-in "Private Safe" function in MIUI
The most reliable and easy way to do this is to use the built-in Private Safe that is available on most Xiaomi smartphones since MIUI 12, which creates an isolated space where you can move files and folders that are protected by password, fingerprint or face. Importantly, Private Safe doesn't just hide files, it encrypts them at the system level, so even when you connect your phone to a PC via MTP, access to them will be blocked.
To activate Private Safe:
- π± Open the Files app (or File Manager).
- π In the bottom menu, tap on the tab "Protected" (or Private Safe).
- π When you first start, the system will suggest setting a password (other than unlocking the screen!) or linking biometrics.
- π Drag the desired files/folders to storage or click Add files.
β οΈ Note: On some models (e.g. Redmi Note 11 for the European market), Private Safe may be disabled by default. β Special facilities β Functions MIUI β Secure storage and activate the slider. If you don't have a point, upgrade the firmware to the latest version.
2.Shidden folders without password: Hidden Files function in MIUI
If you don't need encryption, but just hide the folder from prying eyes (like children or colleagues), MIUI has a built-in "Hidden Files" option that doesn't protect the data with a password, but makes it invisible in a standard file manager, which is suitable for temporary hiding or if you use your phone in "guest mode".
Instructions:
- Open the Files app.
- Find the folder you want to hide and hold it with your finger until the menu appears.
- Select Rename and add a point to the beginning of the title (for example,.MyPhoto).
- Return to the root directory and click on the three dots in the top right corner β Settings β Show hidden files (turn off this item).
β οΈ Note: The folders hidden in this way will be visible:
- π Any file manager with the option to βShow hidden filesβ (e.g. Solid Explorer).
- π» When connecting your phone to your PC through MTP (If the βShow Hidden Itemsβ option is not disabled in Windows Explorer).
- π± After resetting the phone settings to factory.
π‘
To return the hidden folder back, turn on the hidden files in the manager settings again and rename the folder by removing the dot at the beginning.
3. Protection of folders by third-party applications
If your Xiaomi model doesnβt have Private Safe (like the Redmi 9A or POCO C31) or you need advanced features (like a false password or auto-delete if you type incorrectly), use third-party apps. We tested 5 popular solutions and picked the best ones:
| Annex | Type of protection | Biometry | Encryption | Cons |
|---|---|---|---|---|
| AppLock (by DoMobile Lab) | Password, PIN, pattern | β Print/face | β No. | Advertising in the free version |
| File Lock (by SmartSoft) | Password, pattern. | β Print. | β AES-256 | Paid premium version |
| Vault-Hide | Password, false PIN | β All kinds. | β Yes. | A complex interface |
| Keeping | Password, biometrics. | β Yes. | β No. | Registration is required |
Recommendation: for maximum security, choose applications with AES-256 encryption (for example, File Lock). They not only hide files, but also encrypt them, which excludes access even through ADB or TWRP. You can install them from Google Play or APKMirror (if your Xiaomi does not have Google services).
Download APK Officially sourced only|Check the reviews on the app|Create a backup copy of important files|Disable Auto-Update Apps in Play Market-->
4. Encrypt folders with 7-Zip or CryptoExpert
If you work with sensitive data (such as passport scans or corporate documents), the best way to protect yourself is through manual encryption with archivers, a method that is suitable for users who are willing to sacrifice convenience for security: an encrypted archive cannot be opened without a password even on another device.
Instructions for 7-Zip:
- Install 7-Zip from Google Play or the official website.
- Open the application, find the folder that you want to encrypt, and hold it.
- Select Add to Archive β specify the format.7z or.zip.
- In the Encryption section, enter a password (at least 12 characters!) and select the AES-256 method.
- Click OK, the archive will be created in the same folder. The original can be deleted.
The critical caveat is that if you forget the password from the 7-Zip archive, it will be impossible to recover the data β even the recovery specialists will not be able to crack it in a reasonable time.
What to do if I forget my password from the archive?
5. folder protection via Mi Cloud (cloud storage)
If you use Mi Cloud, you can protect folders by syncing them into a private album, which is convenient because the files are available on all your devices, but protected by a password from your Mi Account.
- π Data is stored on Xiaomi servers, which theoretically allows the company to access it (see privacy policy).
- π If your Mi Account is hacked, the attacker will have access to all synchronized files.
- πΆ To download large files requires a stable Internet connection.
How to set up:
- Open the "Gallery" or "Files" app.
- Select files/folders β Share β Mi Cloud
- Create a new album marked "Private."
- In the album settings, turn on the option "For me only".
β οΈ Note: If you delete files from Mi Cloud, they will disappear from your phone (if sync was enabled). Before mass deletion, check if the important data is only in the cloud.
6. Password reset and access restoration
If you have forgotten your password from Private Safe or a third-party application, the recovery options depend on the method of protection:
| Type of protection | Recovery method | Data loss? |
|---|---|---|
| Private Safe (MIUI) | Reset via Mi Account (if tied) | β No. |
| Third-party locker (e.g. AppLock) | Recovery via email or security issue | β No. |
| Encrypted Archive (7-Zip) | Impossible. | β Yes. |
| Biometrics (print/face) | Add a new fingerprint in the security settings | β No. |
For resetting the Private Safe password:
- Go to Settings β Passwords and Security β Secure Storage.
- Press Forgot Your Password?
- Enter the data from Mi Account (if the phone is linked to the account).
- Create a new password.
If the Mi Account is not tied or you have forgotten its data, the only way out is to reset your phone to factory settings (all data in Private Safe will be lost!).To avoid this, regularly export important files to your PC or external drive.
π‘
Never store passwords from secure folders in phone notes or messengers. Use password managers (Bitwarden, KeePass) or physical media (written on paper).
7.Alternative methods: guest mode and second user
If you need to not just protect the folder, but completely isolate some of the data on the phone, consider two system solutions:
- π₯ Guest mode: restricts access to selected applications and files. Enabled through Settings β System and device β Additionally. β Guest mode, suitable for the temporary transfer of the phone to another person.
- π Second user: creates a separate profile with its own settings and files. Configures to Settings β System and device β Users. Minus - takes up additional space in memory.
Both methods do not encrypt data, but they do hide it from the main user, for example, you can transfer sensitive files to the profile of the second user and log out after use, but remember: the administrator of the device (you) can always access all profiles through settings.