The lock is on the app, not the files

Where supported, requiring authentication to open Files gates that interface. It does not encrypt individual documents, add per-folder passwords, or change what any connected cloud provider allows.

Files is an aggregator: it presents local storage and provider locations in one place. Locking the aggregator leaves each underlying location exactly as accessible as before.

The same document is reachable elsewhere

  • The cloud provider's own app, which has its own authentication.
  • Share links previously created for the document.
  • Recently opened lists in other applications.
  • Preview and Quick Look caches.
  • Exported or downloaded copies in other locations.

Where the lock genuinely helps

A Files app lock can prevent browsing on an unlocked phone. When Stolen Device Protection applies, opening a locked app requires biometrics without passcode fallback; Always extends that requirement to familiar locations.

Against anything that reaches the file another way — a provider app, a backup, a share link — it does nothing, and expecting otherwise is the error worth avoiding.

Setting it up

  • Confirm Files is eligible for the native lock on your iOS version.
  • Review each connected storage provider and its own protection.
  • Test search, previews, share sheets, and other apps that can open the same file.
  • For genuine separation, import documents into encrypted storage with its own credential.

Two mislabels

  • Calling an app lock per-folder encryption.
  • Leaving sensitive PDFs sitting in Downloads.

A fictional example

Priya starts with a non-sensitive test: “Confirm Files is eligible for the current native lock control.” Next, Priya follows the second check: “Review each connected storage provider.” This fictional scenario demonstrates the decision process; it is not a report of product testing.

Common mistakes

  • Calling an app lock per-folder encryption
  • Leaving sensitive PDFs in Downloads

What this workflow does not change

  • Calling an app lock per-folder encryption
  • Leaving sensitive PDFs in Downloads

Questions people ask

Can every Files folder have a different password?

No. Use an encrypted archive or vault when a separate file-container secret is required.

Sources and further reading