How to Lock Apps on Android
Handing your phone to a friend, a child or a colleague should not mean handing over your messages. Locking individual apps is the simplest fix, and here are the three ways to do it on Android, what each one actually protects, and how to choose.
The short answer
Android has no built-in, universal app lock. Some manufacturers add one, and everyone else needs a third-party app locker. Whichever route you take, the lock works the same way: opening a protected app shows a lock screen that needs your fingerprint, PIN or pattern before the app appears.
If what you actually want is a locked folder rather than a locked app, that is a different problem with a different answer, and Android gives you less help than you would expect. It is covered separately in how to lock a folder on Android.
Method 1: Check what your phone already has
Before installing anything, check your manufacturer’s own feature. Coverage is patchy and the names differ:
- Samsung: Secure Folder (Settings → Security and privacy → More security settings → Secure Folder). It creates a separate encrypted space with its own copies of apps, rather than locking the ones you already use. Powerful, but it needs a Samsung account and duplicates apps.
- Xiaomi / Redmi / POCO: App Lock (Settings → Apps → App Lock). Closest to a true built-in app lock.
- OPPO, realme, vivo: App Encryption or App Lock, usually under Privacy.
- Huawei and Honor: App Lock, under Settings → Security. On first use it asks you to set a PIN or pattern, or to turn on fingerprint unlock.
- Google Pixel, Motorola, Nokia and most stock Android: no app lock at all. Pixel offers a “private space” on Android 15+, which again is a separate space rather than a lock on existing apps.
If your phone has one and it does what you need, use it. It is deeply integrated and costs nothing.
Samsung, step by step
Samsung is the one most people are asking about, and it is also the one that does not do what the question implies. Secure Folder does not lock the WhatsApp on your home screen. It makes a second, separate WhatsApp inside a protected space, with its own account and its own chats.
- Open Settings, then Security and privacy.
- Tap More security settings, then Secure Folder.
- Sign in to your Samsung account when it asks. There is no way past this step.
- Choose the lock type: pattern, PIN, password or fingerprint.
- Inside Secure Folder, tap Add apps and pick what goes in.
If the tile is missing, swipe down twice for the Quick Panel and check there, or search “Secure Folder” in Settings. On some carrier builds it sits under Biometrics and security instead, which is the older One UI name for the same menu.
Xiaomi, Redmi and POCO, step by step
This one is a real app lock, the kind the question actually means. The app you already use stays where it is and asks for a PIN when opened.
- Open Settings, scroll to Apps.
- Tap App lock, then Turn on.
- Set the pattern or password when prompted, and add your Mi account if you want a recovery route. Skipping it means a forgotten password cannot be reset.
- Switch on the apps you want locked.
On older MIUI builds the same screen lives inside the Security app rather than Settings.
App pinning, which every Android phone has, and what it actually does
There is one built-in feature on every Android since Lollipop, and almost every guide files it under app locking by mistake. It is called App pinning, or Screen pinning on older versions, and you turn it on under Settings → Security and privacy → More security settings → App pinning.
It does the opposite of an app lock. Pinning keeps someone inside one app instead of keeping them out of it. You pin the app, hand the phone over, and the person cannot leave that app until the screen lock is entered, as long as you switch on “Ask for PIN before unpinning”.
That makes it genuinely useful when you pass your phone to a child or a stranger for one task, and useless for the thing most people are actually asking about, which is stopping someone opening WhatsApp or your gallery while the rest of the phone stays usable. For that you need a manufacturer app lock or a third-party one.
Method 2: Use an app locker
If your phone has no built-in option, or you want to lock apps you already use in place without duplicating them, an app locker is the answer. They all work on the same principle:
- You choose which apps to protect.
- The app watches which app comes to the foreground.
- When a protected app opens, a lock screen appears on top of it.
- Your fingerprint, PIN or pattern dismisses the lock and the app continues normally.
Why app lockers ask for unusual permissions
This is where most people hesitate, and it is worth understanding rather than just tapping Allow.
| Permission | Why it is needed | What it can see |
|---|---|---|
| Usage access | To notice the instant a protected app is opened | App names only, never content inside them |
| Display over other apps | To draw the lock screen above the app being protected | Nothing; it only draws |
| Accessibility (optional) | Makes blocking instant rather than a fraction of a second later | Window-change events only, if implemented properly |
| Device admin | Stops someone uninstalling the locker to bypass your lock | Nothing. It is a policy, not data access |
What to look for in an app locker
- Works with your existing screen lock. If it makes you invent a new password, that is one more thing to forget.
- Works without a fingerprint sensor. Plenty of phones do not have one, and many lockers quietly break on older Android versions when only a PIN is set.
- Nothing leaves the device. Your list of locked apps is sensitive on its own. It should never be uploaded.
- Uninstall protection. Without it the lock is decorative.
- Honest about what it does. Many “app lock” listings also promise photo vaults and file encryption. Those are different features, so check the app actually has them.
Method 3: Hide the app lock itself
An app locker sitting on your home screen advertises that you have something worth locking. That is often the first question someone asks.
Some lockers can disguise their own launcher icon, appearing as a calculator, a weather app or a notepad. The better implementations are genuinely functional: the calculator really calculates, and entering a secret PIN followed by the equals key opens the vault instead of showing a result. Anyone who taps it sees a calculator and moves on.
Which method should you choose?
| If you… | Use |
|---|---|
| Have a Xiaomi, OPPO, realme or vivo phone | The built-in App Lock first |
| Have a Samsung and want a fully separate space | Samsung Secure Folder |
| Want to lock the apps you already use, in place | A third-party app locker |
| Have a Pixel, Motorola, Nokia or stock Android | A third-party app locker |
| Do not want anyone to know you lock apps at all | A locker with an icon disguise |
Common questions
Can someone uninstall an app locker to get past it?
Only if device admin is switched off. With it active, Android refuses to uninstall the app until you disable device admin yourself, which goes through your screen lock.
Do app lockers drain the battery?
A well-built one barely registers. The cost comes from how often it checks which app is in the foreground. Lockers that poll aggressively, or that do the work on the main thread, are the ones that hurt. If a locker offers an accessibility-based blocker, it is usually both faster and cheaper than polling.
Will an app lock work without a fingerprint?
It should. A locker that uses Android’s standard authentication accepts a PIN, pattern or password as well. If an app refuses to open without an enrolled fingerprint, that is a bug, and a common one on Android 8 and 9.
Does an app lock protect my data if the phone is stolen?
Partly. It stops someone opening those apps on the unlocked phone, which is the everyday risk. It does not encrypt your files, and it will not stop an attacker with physical access and technical skill. For that, use full-device encryption and a strong screen lock. Both are built into Android.
Is a free app lock safe to use?
It depends entirely on the app. Judge it on what it does with your data: whether your list of locked apps stays on the device, whether it requires an account, and whether its permission requests match what it claims. An app locker that wants your contacts or your location is asking for things it does not need.
