How to Encrypt Photos on iPhone: What Works in 2026

Photos on your iPhone are already encrypted at rest: iOS encrypts all user data with AES-256 keys tied to your passcode. What iOS doesn't offer is a way to encrypt specific photos with a different secret, so anyone who can unlock your phone can see everything. To get that, you need either a locked note with its own password (for a few photos) or an encrypted vault app (for many). For photos stored in iCloud, turn on Advanced Data Protection.

Three layers matter here: the device, iCloud, and individual photos. Here's how to handle each.

Layer 1: Device encryption (already on)

Every iPhone with a passcode uses Apple's Data Protection. Files are encrypted with keys that are protected by the Secure Enclave and your passcode. When the phone is locked, especially after a restart, the data is very hard to get at.

To make the most of it:

1. Go to Settings > Face ID & Passcode (or Touch ID & Passcode).
2. Tap Change Passcode, then Passcode Options, and choose Custom Alphanumeric Code. A longer passcode directly strengthens the encryption protecting everything on the phone.
3. Turn on Stolen Device Protection in the same screen.
4. Scroll to the bottom and check that it says Data protection is enabled.

What this layer does not do: once the phone is unlocked, every app and every person using it sees decrypted photos. Device encryption protects against a stranger with a locked phone, not against someone who knows your passcode. The Hidden album sits on top of this same layer; it doesn't add its own encryption.

Layer 2: iCloud Photos (end-to-end only if you turn it on)

If iCloud Photos is on, your photos are also stored on Apple's servers. By default they're encrypted, but Apple holds the keys, which means Apple could decrypt them, for example in response to a lawful request or to help you recover your account.

Advanced Data Protection changes that so only your trusted devices hold the keys:

1. Open Settings and tap your name at the top.
2. Tap iCloud.
3. Scroll down and tap Advanced Data Protection.
4. Tap Turn On Advanced Data Protection and follow the prompts. You'll need to set up a recovery contact or a recovery key first.

Things to know before you turn it on:

• Recovery is on you. If you lose access to your devices and your recovery key or contact, Apple can't get your data back.
• Shared Albums aren't covered. iCloud Shared Albums and items shared via "anyone with the link" don't use end-to-end encryption.
• Older devices. All devices signed in to your Apple Account need recent software.
• Availability. Apple has restricted the feature in some regions, so you may not see it everywhere.

What is end-to-end encryption for photos? explains the concept, and how to hide photos from iCloud covers keeping some photos out of iCloud entirely.

Layer 3: Individual photos with their own key

This is the gap most people are actually trying to close: "I want these photos encrypted so that my passcode alone doesn't open them."

Built-in: locked notes

Notes can lock individual notes with a custom password, and Apple encrypts locked notes.

1. Settings > Apps > Notes > Password, choose the account, and pick Create Password.
2. In Notes, create a note, attach your photos, then tap More (three dots) > Lock.
3. Delete the originals in Photos and empty Recently Deleted.

This works for a few images. It's awkward for an actual photo collection, and notes containing video can't be locked. See how to lock notes on iPhone.

Files app: no per-file encryption

The Files app doesn't offer per-file encryption on iPhone. Password-protected zip files or PDFs made by third-party tools are possible but impractical for photos you want to look at.

The practical option: an encrypted photo vault

An encrypted vault app gives individual photos their own key while still letting you browse them like a gallery. The things to check in any vault:

• Does it actually encrypt the files? Some apps just put a PIN screen in front of normal files. See are calculator vault apps safe?
• Where does the key come from? It should be derived from your secret, not stored next to the files.
• Who else holds the key? If the vendor can reset your password by email, the vendor can access the key.

sigil. is designed around those questions:

• A 256-bit key per vault, unlocked by a sign you draw on a 5×5 dot grid, hardened with Argon2id and bound to the phone's secure chip. See pattern encryption.
• No account, no server. Encryption happens on the device. We never see your photos or your sign.
• Separate vaults with separate signs, no visible list. See multiple hidden vaults.
• Metadata stripped on import and export, and a warning before you export a decrypted copy.

Encrypting your existing photos

1. Install sigil. and draw a sign. The pattern strength meter shows how hard your sign is to guess.
2. Write the 12-word recovery phrase on paper. It's the only way to recover a forgotten sign.
3. Import the photos. They're encrypted on the device as they come in.
4. Delete the originals from Photos and empty Recently Deleted. If iCloud Photos is on, this removes them from iCloud too.
5. Take future sensitive photos with the private camera, so they're encrypted from the start.

What encryption can't fix

• A weak secret. AES-256 is not the weak point; a guessable password, passcode, or sign is. AES-256 encryption explained shows why.
• Copies elsewhere. Photos already sent in chats, backed up elsewhere, or shared remain wherever they went.
• Metadata when you share. A decrypted photo you share can still carry GPS coordinates. Use the EXIF remover or see how to remove EXIF data on iPhone.

Summary