How to Store Tax Documents on iPhone Safely
Keep tax documents in an encrypted vault, not in Camera Roll or a loose Downloads folder. A tax form holds your name, address, income and tax ID on one page. Photograph or import it straight into the vault, sort it by year, and delete every other copy.
Try Cryptile free: join the beta on TestFlight
What do I need to know?
- A scan in Camera Roll is an ordinary photo. It syncs and appears in search. Anyone with your passcode can see it.
- Standard iCloud is not end-to-end encrypted for Photos or backups. Apple's iCloud data security overview says Advanced Data Protection changes that.
- You need these files for years. Pick storage you can still open after you change phones.
Which tax documents should be protected?
Anything with a tax ID or income on it. Examples are filed returns, wage and income forms, and bank statements. Deduction receipts and tax office letters count too.
Photos of your ID used for e-filing belong in the same place. See keeping card and ID photos encrypted.
How do I store them in Cryptile?
- Open Cryptile and draw a pattern of at least 8 cells. A new pattern opens a new, empty vault.
- Write down the 9-word recovery phrase on paper. There is no reset.
- Tap Add → New folder and name it by year, such as Taxes 2025.
- For paper forms, open the folder and tap Add → Take photo. Shoot each page.
- For PDFs, tap Add → Files and pick them from the Files app. You can also share a PDF into Cryptile from Mail.
- Delete the originals from Files, Downloads and Mail once they are in the vault.
If a scan is already in Photos, add it with Add → Photos & videos and let Cryptile delete the original. Then clear Recently Deleted in Photos.
How do I find a form later?
With Cryptile Plus, text in photos and PDFs is read on the device when you add them. Search for a form name, an employer or a year, and the document comes up. On the free plan, use folders and file names.
How long should I keep tax records?
It depends on where you file. In the US, the IRS page How long should I keep records? gives 3 years as the general rule. Some cases need 6 or 7 years, and employment tax records at least 4.
Check with your tax office or an accountant for your own case.
What about Files, Notes or email?
The Files app keeps PDFs in order, but anyone who unlocks your phone can open them. A locked note can hold text and images, but Apple lists PDFs among the things it cannot lock. See locked notes vs a vault app.
Email is the weakest place. Tax PDFs often sit in your inbox and sent folder for years.
What this doesn't protect against
When you send a return to an accountant, their copy is outside your vault. Anyone who watches you draw your pattern can open the vault. If you lose both your pattern and your recovery phrase, the vault is gone, so keep paper or another backup of anything you are required to keep.
Do it with Cryptile
Cryptile stores PDFs, photos and notes together, each encrypted with AES-256-GCM under a key made on your device from your pattern. Its encrypted iCloud backup holds ciphertext only, and there is no account and no server.
Cryptile is free for up to 2 vaults, 100 photos and 10 videos. Plus removes the limits and adds search inside the vault and the panic pattern, for $19.99 a year (7-day free trial) or $39.99 once.