How to Store ID Documents Safely on Your Phone

The safest way to store ID documents on your phone is to keep the scans out of the Photos app, protect them with a secret that's different from your phone passcode, and strip their metadata. On iPhone, that means scanning into a locked note with its own password, or into an encrypted vault. Where it's supported, Apple Wallet is better still for everyday use of a driver's license or state ID, because you show a verified credential instead of an image.

Why the Camera Roll is the wrong place

Most people photograph their passport once, for a hotel or a visa form, and it stays in Photos forever. That's where most risk comes from:

• It opens with your passcode. Anyone who unlocks your phone can scroll to it. The Hidden album uses the same passcode.
• It's searchable. Photos recognizes text in images. Searching "passport" or a surname can bring up your ID scans.
• It syncs. With iCloud Photos on, it's on your iPad, your Mac, and anywhere else you're signed in, including a shared family iPad.
• It surfaces. Documents can show up in Memories, widgets, and photo pickers in other apps.
• It carries location. An ID photo taken at home tells anyone who gets the file where you live.

If you've never cleaned this up, search Photos now for "passport," "license," "ID," and "card."

Option 1: Apple Wallet (where supported)

For a US driver's license or state ID, Apple Wallet is designed for this job. You present a verified credential with Face ID instead of handing over a picture of your card.

1. Open Wallet and tap the Add (+) button.
2. Choose Driver's License or ID Card.
3. Follow the prompts to scan the card and verify your identity.

Limits: it's available only in participating US states, accepted in limited places (such as some TSA checkpoints and select businesses), and doesn't replace the physical card. Recent iOS versions also support a Digital ID created from a US passport, again with limited acceptance. For other countries and other documents, you still need a scan.

Option 2: Scan into a locked note (built in)

Notes can scan documents and lock them with a password separate from your phone.

Set a Notes password first

1. Go to Settings > Apps > Notes > Password.
2. Choose the account. For documents you don't want in iCloud, use On My iPhone (enable it under Settings > Apps > Notes > "On My iPhone" Account).
3. Tap Create Password and set a hint. Leave Face ID off if you want the password to be the only key.

Scan and lock

1. Open Notes and create a new note in that account.
2. Give it a neutral first line, like "Travel," because the title stays visible in the list.
3. Tap the camera button and choose Scan Documents.
4. Hold the phone over the document. It captures automatically, or tap the shutter. Tap Save.
5. Tap the More button (three dots) and tap Lock.

Scans made this way go straight into the note; they don't land in the Camera Roll. More detail in how to lock notes on iPhone.

Limits: if you forget the Notes password, Apple can't recover those notes. Notes with attached PDF files can't be locked, so use Scan Documents inside the note rather than attaching a PDF someone sent you.

Option 3: An encrypted vault for documents

If you keep several documents for several people, such as passports for the family, insurance cards, a lease, visas, a locked note gets crowded. A vault gives you a browsable library with its own key.

sigil. works well for this:

• The private camera photographs a document straight into the vault. It never touches the Camera Roll, iCloud Photos, or Photos search.
• Encryption with its own secret. A 256-bit key that only the sign you draw on a 5×5 grid can unlock, bound to the phone's secure chip, not your passcode. See pattern encryption.
• Metadata stripped on import and export, so a scan doesn't carry your home's coordinates.
• Separate vaults. Keep documents in a vault separate from personal photos, each with its own sign. See multiple hidden vaults.
• Export warning. When you export a document to send it, the app warns that you're creating an unencrypted copy.

Moving existing ID photos out of Photos

1. In Photos, search for "passport," "license," "ID," and the document numbers you know.
2. Import each into your vault (or add them to a locked note).
3. Delete the originals from Photos.
4. Open Recently Deleted under Utilities and delete them there too.
5. Check Files, Mail attachments, and Messages threads where you may have sent them before.
6. If you used iCloud Photos, deleting syncs. Confirm on another device that they're gone.

Sharing an ID copy safely

Sometimes you have to send a scan: to a landlord, an employer, a hotel. A few habits reduce how useful a leaked copy would be:

• Watermark it. Open the image, tap Markup, and write across it: "For [company], [purpose], [date] only." It doesn't stop misuse, but it makes the copy much less reusable.
• Crop what isn't needed. If they only need your name and photo, cover the document number with a shape in Markup.
• Strip metadata. Turn off Location in the share sheet's Options, or run it through the EXIF remover.
• Prefer secure upload portals over email.
• Delete the sent copy afterward from your Sent folder or chat thread if you can.

If your phone is lost or stolen

This is where the setup pays off. With ID scans in an encrypted vault or a separately locked note, a thief who learns your passcode still doesn't get them. Still:

1. Mark the device as lost in Find My and consider erasing it remotely.
2. Change your Apple Account password.
3. If you think ID images were exposed, contact the issuing authority and consider a credit freeze where available.

The lost or stolen phone scenario covers this in more detail, and ID documents goes through specific document types.

A note on backups

sigil. keeps everything on the device and doesn't have a cloud backup yet. For ID documents, that's often what you want, and losing the scan is usually an inconvenience rather than a disaster because the originals are physical. Still, keep the 12-word recovery phrase for your vault written down and stored safely; without it, a forgotten sign can't be recovered.

Summary