What Happens to My Photos If My iPhone Is Stolen?
While the phone stays locked, your photos stay out of reach. The risk is a thief who also learns your passcode. Act fast, and keep private photos in a vault with its own key.
What do I need to know?
- Mark the phone as lost first. Lost Mode locks it with your passcode and blocks changes to your Apple Account.
- Erasing cannot be undone. You can still locate an erased iPhone with Find My on iOS 15 or later.
- Turn on Stolen Device Protection beforehand. It needs iOS 17.3 or later.
What should I do right after it is stolen?
Go to iCloud.com/find and select your iPhone under All Devices. Choose Mark as Lost and follow the onscreen steps.
Do not remove the device from Find My. Apple warns that this removes Activation Lock and makes it easier to resell.
Erase the iPhone only if you accept that it cannot be undone. Back up first if you still can. Apple's lost or stolen iPhone page has the full steps.
What does Stolen Device Protection do?
It adds a layer when the iPhone is away from familiar places, such as home or work. Apple says actions like viewing saved passwords need Face ID or Touch ID, with no passcode fallback.
Other changes wait one hour and need biometrics before and after. That includes changing your Apple Account password or your passcode. Turn it on under Settings, Face ID & Passcode. See Apple's Stolen Device Protection page.
Does a vault help if the thief knows my passcode?
Yes, for the vault. Photos in the Photos library open for anyone who has your passcode. Cryptile files are ciphertext, and the key comes from a pattern the passcode does not reveal.
A different pattern opens a different vault, so a thief cannot see how many you have. Your encrypted iCloud backup restores on a new phone with your 9-word recovery phrase.
Which step matters most?
- Today: turn on Stolen Device Protection and know your Find My sign-in.
- This week: move sensitive photos into an encrypted vault and delete the originals, including from Recently Deleted.
- Once: write the recovery phrase on paper and keep it away from the phone.
What this doesn't protect against
A vault cannot help if the phone is already unlocked and the vault is open. Anyone who watches you draw your pattern can copy it. A short pattern is weaker than a passphrase, so use 8 or more cells. If you lose both the phone and your recovery phrase, the vault is gone.
Do it with Cryptile
Cryptile has no account and no server, and the developer never holds your keys. The panic pattern, a Plus feature, opens a decoy vault when you are made to unlock.
Cryptile is free for up to 3 vaults, 100 photos and 10 videos in total. Plus removes the limits. It costs $19.99 a year (7-day free trial), $39.99 once, or $1.99 a week.
Cryptile Send, Files-app access, shared vaults and sync are coming and are not available yet.