How to Access Your Apple Photos Online (and Who Else Can)
You do not need an app. Go to icloud.com/photos in any browser and sign in with your Apple Account. This only works if iCloud Photos is turned on, and anyone with your sign-in details can do the same.
Get an email when Cryptile is on the App Store
What do I need to know?
- It shows what iCloud Photos holds. Photos stored only on your iPhone do not appear.
- Your Apple Account is the key. Password, two-factor code and a trusted device are all that stand in the way.
- You can turn web access off. Advanced Data Protection adds a switch for it.
How do I see my photos in a browser?
These steps work on any computer or phone browser.
- Open icloud.com/photos.
- Sign in with your Apple Account email and password.
- Enter the six-digit code sent to your trusted device.
- Tap Trust if it is your own computer. Skip this on a shared one.
- Sign out when you finish, using your profile picture at the top.
Photos you add on the web upload to iCloud Photos and then appear on your iPhone.
Is iCloud Photos turned on?
On iOS 18 and later, open Settings, tap your name, then iCloud, then Photos. Check that Sync this iPhone is on. If it is off, your pictures never reach the web.
Can I download photos from the web?
Yes. Select one or more photos, then tap the download button. You can pick the original or a more compatible copy.
Can someone else open my photos online?
Yes, if they have your Apple Account password and the sign-in code. A stolen password alone is not enough, because the code goes to your trusted device. A person holding your unlocked iPhone is in a stronger position.
Our page on how hackers reach iCloud Photos covers the usual routes.
How do I stop web access?
Advanced Data Protection can block it.
- Open Settings, tap your name, then iCloud.
- Tap Advanced Data Protection and turn it on.
- Go back to iCloud and turn off Access iCloud Data on the Web.
Browsers can then no longer open your iCloud data. Read our guide to Advanced Data Protection before you switch it on. It makes the recovery contact or key your responsibility.
What this doesn't protect against
Turning off web access does not hide photos on your phone. Anyone who knows your passcode can still open Photos. Photos already shared in an album or sent in Messages stay where they are. For what Apple itself can read, see whether Apple can see your iCloud photos.
Do it with Cryptile
Photos in a Cryptile vault never go to iCloud Photos, and they are not on the web. They stay AES-256-GCM encrypted on your device and open only with your drawn pattern. There is no account and no server. If you lose both the pattern and the 9-word recovery phrase, the vault is gone.
Cryptile is free to start, with encrypted iCloud backup included. Get an email when Cryptile is on the App Store