Scenarios
Phone Photos at Border Crossings: A Calm Guide
What border officers can ask of your iPhone, what iOS can do, and how to travel with fewer private photos exposed without lying to anyone.
The short answer: at many borders, officers can ask to look through your phone, and in some situations you may be required to unlock it. No app changes that. What you can control is how much private material is on the device when you cross, and whether that material sits behind your phone passcode alone or behind a separate layer of encryption. The most effective step is the least technical one: carry less.
The situation and the real risk
Border device searches are usually brief and manual: an officer scrolls through Photos, Messages, or a few apps while you wait. In some cases a device is taken aside or copied for a more thorough examination. The rules differ by country, by whether you are a citizen, resident, or visitor, and they change over time.
For most travelers the realistic risk is not prosecution. It is embarrassment, a long conversation about a photo taken out of context, or a stranger seeing medical images, documents, or family photos that were never meant for anyone else. For some travelers — journalists, activists, lawyers, people from targeted communities — the stakes are higher.
What you can do with built-in iOS tools
- Lock the Hidden album. In Settings > Apps > Photos, keep Use Face ID (or Touch ID / Passcode) on, and turn off Show Hidden Album if you prefer it not to appear in the album list. Our guide on locking the Hidden album walks through it.
- Temporarily disable Face ID before the checkpoint. Press and hold the side button and either volume button until the power-off slider appears, then tap Cancel. The next unlock requires your passcode.
- Check what syncs. If iCloud Photos is on, your library may also exist in iCloud. Turning it off on the phone does not delete what is already in the cloud. See how to stop photos syncing to iCloud.
- Empty Recently Deleted. Deleted photos stay in Photos > Recently Deleted for up to 30 days. Clear it if you removed things before your trip.
- Consider Lockdown Mode (Settings > Privacy & Security > Lockdown Mode) if you have reason to expect targeted attacks. It is designed for a small group of people at higher risk and limits some features.
Where built-in tools fall short
Every built-in protection collapses into a single secret: your phone passcode. If you unlock the phone for an officer, the Hidden album, locked notes, and hidden apps are one more Face ID check away — and that check is your own face or your own passcode. Apple's Hidden album also does not hide the existence of hidden photos; the album is clearly labeled. Our Hidden album security breakdown covers this in detail.
How sigil. fits — and where it does not
sigil. stores photos in vaults encrypted with a 256-bit key. The key is unlocked by a sign you draw on a 5×5 dot grid, not by your phone passcode, so unlocking the phone does not unlock the vaults. See pattern encryption for how that works.
- Separate secret. A person who has your unlocked phone sees an app, not your photos.
- Multiple hidden vaults. Each sign opens its own vault and the app shows no list, so there is no screen that reveals how many vaults exist.
- No account, no server. Nothing about your vaults is stored with us, so there is no online account for anyone to request.
- Disguised icon. A neutral utility icon that doesn't say what the app is. This reduces casual attention; it is not a defense against a determined search.
About the decoy vault: its decoy pattern opens a vault with harmless photos and erases nothing, while your real vault stays hidden. It exists for situations like theft or coercion by someone with no legal authority. We do not recommend using it during a lawful border inspection. Concealing data from officials, or misrepresenting what is on your device, may be illegal and can make your situation much worse. The honest approach — fewer files on the phone, a separate encrypted space, and knowing your rights — is the better plan.
A pre-trip checklist
- Decide what you actually need while traveling. Leave the rest at home on an encrypted backup (see backing up private photos securely).
- Delete what you do not need on the phone, then empty Recently Deleted.
- Check whether iCloud Photos is on and what is already in the cloud.
- Move remaining sensitive photos into an encrypted vault with a sign you have never used elsewhere.
- Write down your recovery phrase and leave it somewhere safe at home, not in your luggage.
- Read current guidance for your destination from a digital-rights or press-freedom organization.
- Before the checkpoint, disable Face ID so the phone requires your passcode.
- If questioned, stay calm and truthful. If you believe your rights were violated, contact a lawyer afterward.
Who should take extra care
If you carry material about other people — sources, clients, patients — the risk is not only yours. Read our page for journalists and people protecting sources, and consider whether that material should cross the border on a phone at all.
Frequently asked questions
Can border officers search my phone?
In many countries, yes. Border agencies often claim broad authority to inspect devices, and the rules, limits, and consequences of refusing vary by country and by your citizenship status. Check current guidance from groups such as the EFF before you travel.
Can I be forced to unlock my phone at the border?
You may be asked or required to, and refusing can have consequences such as delay, device seizure, or denied entry for non-citizens. Whether you can be compelled depends on local law, which is why we recommend checking with a lawyer or a digital-rights organization.
Should I use a decoy vault when asked to unlock?
No feature makes it legal or safe to mislead authorities. Destroying or concealing data during an inspection can be a crime in some places. The safest approach is to carry less sensitive data across the border in the first place.
Is Apple's Hidden album enough when traveling?
No. The Hidden album opens with the same Face ID or passcode as the phone, so anyone who has the phone unlocked can view it.
What is the simplest way to reduce risk?
Travel with fewer private photos on the device. Move what you do not need to a secure location at home, and keep the rest encrypted behind a sign that is separate from your phone passcode.