Cryptile

How to Encrypt Photos on iPhone (Really Encrypt, Not Just Hide)

Updated

Your iPhone already encrypts its storage — every photo on it is unreadable without your passcode once the phone is locked. What it doesn't do is encrypt individual photos separately from everything else. Anyone who unlocks your phone, or anyone you hand it to with Photos open, sees all of them. The Hidden album hides, it doesn't encrypt. So "encrypting a photo on iPhone" really means one of three things: relying on the whole-device encryption you already have, turning on end-to-end encryption for your iCloud backup, or putting specific photos in a container that needs its own key. This guide walks through all three, in that order, and is honest about what each one protects you from.

1. What your iPhone already encrypts (and when it doesn't help)

Every iPhone since the 3GS encrypts its flash storage with keys tied to the device and your passcode. When the phone is locked, the Photos library is protected by iOS Data Protection; after you unlock it once following a restart, most of that data becomes readable to apps and to anyone holding the unlocked phone.

That's the important part. Device encryption protects you against someone who steals a locked phone and tries to read the chips. It does nothing against:

  • a friend, partner or child you hand the unlocked phone to
  • a border agent or police officer who asks you to unlock it
  • a repair shop that needs the phone unlocked to test it
  • yourself, when you share your screen or AirPlay and the wrong album is open

If those are the situations you're worried about, go to section 3.

2. Encrypt your photos in iCloud end-to-end (Advanced Data Protection)

By default, iCloud Photos is encrypted in transit and at rest, but Apple holds the keys. That means Apple can decrypt your photos if legally compelled, and a breach of Apple's systems is at least theoretically a breach of your photos.

Advanced Data Protection (iOS 16.2 and later) changes that: your photos, backups, Notes and most other iCloud data become end-to-end encrypted, with keys only on your trusted devices.

  1. Open Settings, tap your name at the top, then iCloud.
  2. Scroll to Advanced Data Protection and tap Turn On.
  3. You'll be required to set up a recovery contact or a 28-character recovery key. Do this carefully — with Advanced Data Protection on, Apple cannot recover your account if you lose access.
  4. Confirm. All your signed-in devices must be reasonably up to date, or you'll be asked to update or remove them.

This is worth doing regardless of anything else in this guide. It makes your iCloud photos as private as the photos on the phone itself. It still does not solve the unlocked-phone problem.

3. Encrypt specific photos in a vault (what people usually mean)

To make particular photos unreadable to someone holding your unlocked phone, they need to be stored in a container with its own key — something separate from your passcode and Face ID. That's what a vault app does, and it's where the quality varies enormously:

  • Some "vault" apps only put a PIN screen in front of a normal folder. The photos sit on disk as ordinary JPEGs and can be pulled off with a cable. That is a lock on the door, not a safe.
  • Some encrypt properly but require an account and back up to their own servers while holding the keys. That moves your trust from Apple to a much smaller company.
  • A few encrypt each file on the device with a key derived from something only you know, and never hold that key themselves.

What to look for, in one paragraph: the files should be encrypted with a standard cipher (AES-256-GCM is the normal choice), the key should come from something you enter rather than from the phone's passcode, there should be no account and no server that could hand your photos over, and the developer should publish how it works. If they won't tell you how it works, assume it doesn't.

The workflow is the same in any decent vault app:

  1. Create a vault and set its passphrase or pattern. Write down the recovery phrase if the app gives you one — there is no "forgot password" on real encryption.
  2. Import photos from your library. The app encrypts them as they come in.
  3. Delete the originals from Photos — and then from Recently Deleted (Albums → Recently Deleted → Select → Delete All). Until you do, the unencrypted copies are still there and still in iCloud Photos.
  4. If you use iCloud backup for the vault, confirm the app encrypts before uploading. Ciphertext in iCloud is fine; plaintext in iCloud defeats the purpose.

4. Quick alternatives that are "good enough" for some things

  • Locked Notes: Notes can be locked with a password or Face ID (tap the share icon → Lock Note), and you can insert photos into a locked note. The note is encrypted on the device and in iCloud. It's clumsy for more than a handful of images, but it's built in and free.
  • Password-protected PDF: for scanned documents rather than photos, Files → select the PDF → share → Print → pinch out on the preview to make a new PDF, then open it in a PDF app that can add a password. iOS doesn't do this natively; macOS Preview does.
  • Hidden album with Face ID: fine for keeping a gift idea away from someone glancing at your phone. Not fine for anything you'd be harmed by someone seeing. The next guide explains exactly why.

What this doesn't protect against

Nothing in this guide helps if your phone is unlocked and malware is running on it, or if someone watches you enter your vault pattern. Advanced Data Protection doesn't protect data you've shared with other people, and the Shared Albums feature in Photos is never end-to-end encrypted. And every method here is only as strong as the secret behind it — a four-digit PIN in front of AES-256 is a four-digit PIN.

Do it with Cryptile

Cryptile is the third approach done properly: every photo, video and thumbnail is encrypted on your device under a key derived from a pattern you draw, there is no account and no server, iCloud backup is encrypted before it leaves the phone, and the encryption core is open source with a published threat model you can read.

Cryptile is free for up to 100 photos and 10 videos: encrypted vaults, no account, no server. Plus removes the limits and adds encrypted sending in Messages, search and Files access as they ship, for $19.99 a year or $39.99 once, the same price every day; there is no timer. Get Cryptile on the App Store