Guides
How to Securely Back Up Private Photos (iPhone, 2026)
Back up private photos so only you can read them: iCloud with Advanced Data Protection, encrypted Mac backups, encrypted disk images, and a 3-2-1 plan.
To back up private photos securely, make sure every copy is encrypted with a key only you control: turn on Advanced Data Protection for iCloud, and for an offline copy, make an encrypted Finder backup or store photos in an encrypted disk image on a drive you keep. Aim for three copies on two kinds of storage, one away from home, and write down every password or recovery key on paper. A backup you can't decrypt is worthless, and one anyone can read isn't private.
What "secure backup" means
A good backup for private photos has three properties:
- Encrypted with your key. The provider, a thief or a repair shop can't read it.
- Separate from the phone. Losing the phone doesn't lose the backup.
- Restorable. You've tested it and you still have the password.
Most failures come from the third point, not the first.
Option 1: iCloud with Advanced Data Protection
iCloud Photos is the easiest automatic backup. With standard data protection, Apple holds the keys. With Advanced Data Protection (ADP), photos are end-to-end encrypted and Apple can't read them.
On iOS 18 and iOS 26:
- Go to Settings > [your name] > iCloud > Photos and turn on Sync this iPhone.
- Go back to iCloud, tap Advanced Data Protection and turn it on.
- Set up a recovery contact or recovery key. Write the key on paper.
Limits: Shared Albums and "anyone with the link" sharing are not covered by ADP. ADP isn't offered in every country. And everything in your library syncs to every device on your account, including the Hidden album. See what end-to-end encryption means for photos.
Option 2: An encrypted backup on a Mac or PC
A local, encrypted backup of the whole iPhone is a solid offline copy.
On a Mac (macOS Catalina or later):
- Connect the iPhone with a cable and open Finder.
- Select your iPhone in the sidebar and stay on the General tab.
- Choose Back up all of the data on your iPhone to this Mac.
- Tick Encrypt local backup and set a password.
- Click Back Up Now.
On Windows: use the Apple Devices app and tick the same Encrypt local backup option.
Note that if you use iCloud Photos with Optimize iPhone Storage, the phone may hold only previews, so a full device backup isn't the same as a copy of your originals. Download originals first, or export the photos you care about separately.
Option 3: An encrypted container on a drive
For a specific set of photos, an encrypted container is cleaner than a whole-device backup.
Encrypted disk image on Mac:
- Open Disk Utility.
- Choose File > New Image > Blank Image.
- Set a size, and under Encryption choose 256-bit AES.
- Set a strong password; use our password strength checker to judge it.
- Copy your photos into the mounted image, then eject it.
- Store the image on an external drive, and keep a second copy elsewhere.
Cross-platform alternative: tools like Cryptomator encrypt files into a vault folder that you can put on any cloud drive or USB disk. See our comparison with Cryptomator for where each tool fits.
Encrypted external drive: on a Mac, format the drive as APFS (Encrypted) in Disk Utility.
Option 4: An end-to-end encrypted photo cloud
If you don't want photos in iCloud at all, dedicated end-to-end encrypted photo services exist. They're worth comparing on export options, pricing and whether the code is open. See our pages on Ente Photos and Proton Drive.
The 3-2-1 plan, applied
| Copy | Where | Encrypted with |
|---|---|---|
| 1 | The phone | Device encryption, plus a vault for sensitive items |
| 2 | iCloud with ADP, or an E2EE cloud | Your keys |
| 3 | External drive at a relative's or office | Encrypted disk image or drive |
Test a restore once a year: open the container, check a few photos, confirm you still know the password.
Where sigil. fits, and where it doesn't (yet)
sigil. is a vault, not a backup service. It keeps sensitive photos on your iPhone encrypted with a 256-bit key that only the sign you draw can unlock, with no account and no server. That protects photos from people who pick up your phone, even if they know your passcode.
It's important to be clear about what this means for backup: sigil. has no cloud backup yet. Its 12-word recovery phrase restores access if you forget your sign, but it can't bring back data from a phone that's lost or broken. For anything you can't afford to lose:
- Keep an independent copy in an encrypted container (Option 3 above). When you export from sigil., it warns you that the exported copy is not encrypted and strips EXIF and location metadata, so move exported files straight into the encrypted container and delete any loose copies.
- Store the vault's recovery phrase on paper, separately from the backup password. See what is a recovery phrase.
Mistakes to avoid
- Unencrypted USB sticks with private photos in a drawer.
- Emailing photos to yourself as a backup. They sit on mail servers indefinitely.
- Storing the backup password in the same place as the backup.
- One copy only. Phones get lost; see how to protect photos if your phone is stolen.
- Never testing a restore.
Frequently asked questions
What is the most secure way to back up iPhone photos?
For most people, iCloud Photos with Advanced Data Protection turned on, plus an encrypted backup on a computer or external drive that you control.
Are iPhone backups on a Mac encrypted?
Only if you tick Encrypt local backup in Finder (or the Apple Devices app on Windows). Encrypted backups also include saved passwords and Health data.
What happens if I forget the encrypted backup password?
You can't restore from that backup. Store the password in a password manager or on paper with your recovery phrases.
Is a private photo vault a backup?
No. A vault protects photos on the phone. If the phone is lost and the vault was the only copy, the photos are lost too, unless you backed them up separately.
How many backups do I need?
A common rule is 3-2-1: three copies, on two different kinds of storage, with one kept somewhere other than your home.