How to Protect Your Photos if Your iPhone Is Stolen

To protect your photos if your iPhone is stolen, set three things up before it happens: a strong passcode, Stolen Device Protection (Settings > Face ID & Passcode), and Find My. If it's taken, mark it as lost at icloud.com/find and change your Apple Account password from another device. The weak point is the passcode: anyone who has watched you type it can open Photos, including the Hidden album, so keep truly sensitive photos behind a separate secret.

Before: four settings to check today

1. A passcode that's hard to watch

Thieves often watch the owner type a passcode in public, then take the phone. A longer passcode is harder to memorize from a glance.

1. Go to Settings > Face ID & Passcode and enter your passcode.
2. Tap Change Passcode, then Passcode Options.
3. Choose Custom Alphanumeric Code or a Custom Numeric Code longer than six digits.

Use Face ID in public whenever possible, and cover the screen when you do type the passcode. Our password strength checker helps compare options.

2. Stolen Device Protection

Available from iOS 17.3 and present in iOS 18 and iOS 26.

1. Go to Settings > Face ID & Passcode and enter your passcode.
2. Tap Stolen Device Protection and turn it on.
3. Optionally, under Require Security Delay, choose Always instead of only away from familiar locations.

Requirements: two-factor authentication on your Apple Account, a passcode, Face ID or Touch ID, Find My, and Significant Locations turned on.

What it does, according to Apple: away from familiar places, actions such as using saved passwords, turning off Lost Mode, erasing the phone or opening a locked app require Face ID or Touch ID, with no passcode fallback. Changing your Apple Account password, your passcode or Face ID requires biometrics, then a one-hour security delay, then biometrics again.

What it doesn't do: it doesn't stop someone with your passcode from opening the regular Photos app.

3. Find My

1. Go to Settings > [your name] > Find My > Find My iPhone.
2. Turn on Find My iPhone, Find My network and Send Last Location.

4. Lock the Photos app

On iOS 18 and iOS 26 you can require Face ID to open an app:

1. Touch and hold the Photos icon on the Home Screen.
2. Tap Require Face ID (or Touch ID / Passcode), then confirm.

With Stolen Device Protection on, opening a locked app away from familiar locations requires biometrics. It's a useful extra layer, but in other situations the passcode still works as a fallback.

After: what to do if your phone is stolen

1. Mark it as lost. Go to icloud.com/find on another device (or the Find My app on a family member's device) and enable Lost Mode. This locks the phone and shows a message on the screen.
2. Change your Apple Account password from another trusted device or at account.apple.com.
3. Remove cards from Wallet through your Apple Account settings or by contacting your bank.
4. Erase the iPhone if you don't expect to get it back or it holds sensitive data. You lose the ability to locate it afterward.
5. Report the theft to the police and your carrier, and note the serial number and IMEI (shown at account.apple.com under Devices).
6. Check iCloud. If you suspect the thief got into your account, review signed-in devices and remove unknown ones.

Our lost or stolen phone scenario walks through this in more detail.

Shorten the window

A few small settings reduce how long a stolen phone stays open:

• Auto-Lock: set Settings > Display & Brightness > Auto-Lock to 30 seconds or 1 minute.
• Require Attention for Face ID: in Settings > Face ID & Passcode, keep Require Attention for Face ID on, so the phone doesn't unlock when you're not looking at it.
• Lock Screen access: in the same settings, under Allow Access When Locked, turn off Control Center, USB Accessories and anything else you don't need on the Lock Screen.

The gap Apple's protections leave

Stolen Device Protection guards your account and your saved passwords. Your photos library is protected by the passcode, and the passcode is exactly what shoulder-surfing thieves collect. The Hidden album opens with the same passcode.

For most photos, that's an acceptable risk. For a few (ID scans, medical photos, contracts, bank documents), it may not be.

A second lock for sensitive photos

sigil. keeps photos in an encrypted vault that doesn't open with your iPhone passcode. Each vault is encrypted with a 256-bit key that only the sign you draw on a 5×5 grid can unlock, hardened with Argon2id and bound to the phone's secure chip. Someone who has your phone and your passcode still has to know the sign. See pattern encryption for how it works.

There's also a decoy vault: if you're forced to open the app, you draw the decoy pattern instead of yours. It opens a vault with harmless photos and erases nothing; your real vault stays hidden. That's a narrow tool with real limits, explained in what is a duress password. We'd rather you hand over the phone than get hurt.

A thief who simply keeps guessing is a different case. Wrong signs trigger growing waits (30 seconds, then a minute, then five minutes), and with self-destruct turned on (free, off by default), too many wrong signs within a time window erase the vaults. The default is 50 in 24 hours, which takes about three and a half hours of guessing to reach, and nothing on screen warns the person trying. The decoy pattern is something you draw under pressure; self-destruct is triggered by someone else guessing. Erased vaults can't be recovered, not even with the recovery phrase, so back up first.

Honest trade-off: sigil. is local-first and has no cloud backup yet. If the phone is stolen, the thief still faces the sign, but you also can't get those photos back unless you backed them up separately. Plan for that with how to securely back up private photos.

Checklist

• Long passcode, typed out of sight.
• Stolen Device Protection on, ideally set to Always.
• Find My on, with Send Last Location.
• Photos app locked with Require Face ID.
• Sensitive photos behind a separate secret, plus a separate backup.
• Know the steps: Lost Mode, change password, erase, report.