Cryptile

Taking Your iPhone In for Repair: How to Keep Your Photos Private

Updated

A screen or battery repair often requires the technician to unlock your phone to test it, and some shops ask for your passcode outright. Apple's own process has a Repair Mode / Diagnostics route that doesn't need your passcode, but third-party shops usually don't. Here's the order of operations that keeps your photos private without making the repair harder.

If you have 15 minutes

  1. Back up first. Settings → your name → iCloud → iCloud Backup → Back Up Now. If the repair goes wrong, this is what you restore from.
  2. Move anything sensitive out of Photos into an encrypted vault that doesn't open with your passcode. Then delete the originals and empty Recently Deleted. A vault that opens with the same passcode you're about to hand over is not a vault.
  3. Check the Hidden album. It opens with your passcode, so it's not a hiding place from a technician. See is the iPhone Hidden album encrypted?
  4. Sign out of nothing, but lock what you can: Notes with sensitive content → lock them (share → Lock Note). Banking apps already require their own auth.
  5. Use a temporary passcode. Settings → Face ID & Passcode → Change Passcode, pick something you'll give the shop, and change it back when you get the phone. Turn off Face ID temporarily (toggle "iPhone Unlock" off) so your face isn't an enrolled key while the phone is out of your hands.
  6. Turn on Stolen Device Protection if it isn't already (Settings → Face ID & Passcode → Stolen Device Protection). It adds a delay and a Face ID requirement to things like changing your Apple ID password from an unfamiliar location.
  7. Find My stays on. Apple-authorized repairs will ask you to turn it off at the counter; do it there, not before.

If you have 2 minutes

Do steps 1, 2 and 5. Backup, vault, temporary passcode.

If you're going to Apple

Apple Store and authorized providers can run diagnostics without your passcode, and in recent iOS versions you can put the phone into Repair Mode (Settings → General → Transfer or Reset iPhone, when prompted by the repair flow) which keeps Find My on and keeps your data protected during the repair. Ask for it. If they insist on the passcode for a specific test, the temporary-passcode trick still applies.

After you get it back

  • Change the passcode back and re-enable Face ID.
  • Check Settings → Face ID & Passcode that no extra face was enrolled ("Set Up an Alternate Appearance" should still be available if you never used it; if it says "Reset Face ID" only, re-enroll to be safe).
  • Check Settings → your name for any devices you don't recognize.
  • Your vault was never openable with the passcode, so there's nothing to re-check there.

What this doesn't protect against

A dishonest shop with the phone unlocked can install a profile or an app; check Settings → General → VPN & Device Management for anything new. A full-disk clone of an unlocked phone would include your encrypted vault as ciphertext — useless to them without your pattern, which is the point of step 2.

Do it with Cryptile

Cryptile's vaults open with a pattern you draw, not with the phone's passcode, so the shop can have the passcode and still not have your photos. Each pattern opens its own vault, and there's no list of vaults to find.

Cryptile is free for up to 100 photos and 10 videos: encrypted vaults, no account, no server. Plus removes the limits and adds encrypted sending in Messages, search and Files access as they ship, for $19.99 a year or $39.99 once, the same price every day; there is no timer. Get Cryptile on the App Store