iPhone Photo Storage: Local, iCloud or Encrypted?
Most people should keep everyday photos in iCloud Photos and turn on Advanced Data Protection if they want Apple out of them. Photos you would not show someone holding your unlocked phone belong in an encrypted vault. The four options differ mainly in who can read them.
Try Cryptile free: join the beta on TestFlight
What do I need to know?
- On the phone is the default. Apple: "By default, your photos and videos are stored on your device in their original, high-resolution version."
- iCloud Photos is not end-to-end encrypted by default. Apple keeps the keys unless you turn on Advanced Data Protection.
- Everything in Photos opens with your passcode. Only a separate vault changes that.
How do the options compare?
| On the phone only | iCloud Photos (standard) | iCloud Photos + ADP | Encrypted vault (Cryptile) | |
|---|---|---|---|---|
| Survives a lost phone | No | Yes | Yes | Yes, with backup on and the 9-word phrase |
| Apple can read it | No copy on Apple's servers | Apple holds the keys | No, end-to-end | No, ciphertext only |
| Someone with your passcode | Yes | Yes | Yes | No, needs your pattern |
| On your Mac and iPad | No | Yes | Yes | Not yet; sync is coming |
| Free space | Your phone's storage | 5 GB free | 5 GB free | 100 photos, 10 videos free |
Apple facts are from its storage page and iCloud data security overview, checked 2026-10-26.
What does Optimize iPhone Storage do?
With iCloud Photos on, Apple says "full-resolution photos and videos are stored in iCloud, and, when needed, space-saving copies are stored on your device." It is on by default with iCloud Photos. It saves space, but the originals then live in iCloud.
To set it on iOS 27:
- Open Settings → your name → iCloud → Photos.
- Turn on Sync this iPhone.
- Choose Optimize iPhone Storage.
When is the phone alone enough?
If you back up to a computer and do not want photos online, keeping them on the phone works. The risk is simple: if the phone is lost and there is no other copy, the photos go with it.
When should I turn on Advanced Data Protection?
When you want iCloud's backup without Apple holding the keys. Apple says it raises end-to-end encryption to 25 data categories, including Photos and iCloud Backup. It has been available since iOS 16.2. If you lose access to your account and your recovery methods, Apple cannot help you get the data back.
Our page on whether Apple can see your iCloud photos has more.
When does a vault make sense?
When the threat is a person, not a server. Partners, parents, a repair shop or anyone who knows your passcode can open the Photos app. A vault with its own key keeps a small set of photos out of their reach. Most people keep the bulk of their library in Photos and only the private part in a vault.
What this doesn't protect against
No storage choice protects a photo you have already sent to someone. iCloud Photos syncs deletes, so a mistake on one device spreads. A vault cannot help if someone watches you draw your pattern, and a short pattern is weaker than a passphrase: use 8 or more cells. If you lose both your pattern and your recovery phrase, the vault is gone.
Do it with Cryptile
Cryptile encrypts every photo, video and file with AES-256-GCM under a key made on your device from your pattern. Its iCloud backup is ciphertext, and only your 9-word recovery phrase restores it. There is no account and no server.
Cryptile is free for up to 2 vaults, 100 photos and 10 videos. Plus removes the limits and adds search inside the vault and the panic pattern for $19.99 a year (7-day free trial) or $39.99 once.