Lost or Stolen iPhone: What Happens to Your Photos

If your iPhone was locked when you lost it, your photos are encrypted and out of reach without your passcode or face. The real exposure comes from phones taken while unlocked and from thieves who saw you type your passcode. Act now with Find My, then prepare for next time by turning on Stolen Device Protection and keeping private photos behind a secret that is not your passcode.

The situation and the real risk

Most lost phones are just lost: left in a taxi, dropped at a restaurant. Most people who find them want to return them or resell them, not browse them. A locked, modern iPhone is genuinely hard to get into.

The scenario worth preparing for is different. Thieves in some cities have learned to watch a victim enter their passcode in a bar, then take the phone. With the passcode they can open apps, view the Hidden album, and, without Stolen Device Protection, change the Apple Account password and lock the owner out. Private photos are then one tap away.

What to do right now

1. Find My. On another Apple device or at icloud.com/find, select the phone and choose Mark As Lost. It locks the device, shows a message with a contact number, and suspends Apple Pay.
2. Secure your Apple Account. If you suspect the thief knows your passcode, change your Apple Account password from another device and review trusted devices.
3. Erase if needed. If you do not expect to get the phone back, choose Erase This Device in Find My. Erasing makes the data unrecoverable for the thief; the device stays tied to your account by Activation Lock.
4. Call your carrier to suspend the SIM, and change passwords for banking and email apps.
5. Report the theft to local police if you need a report for insurance.

Our step-by-step guide on protecting photos if your phone is stolen covers each of these in detail.

Prepare with built-in iOS tools

• Stolen Device Protection. Settings > Face ID & Passcode > Stolen Device Protection. Away from familiar locations, sensitive actions require biometrics with no passcode fallback, and critical changes get a security delay. You can choose to require the delay Always.
• A stronger passcode. A six-digit code is the minimum; an alphanumeric passcode is better. See pattern lock vs PIN vs password.
• Lock the Hidden album and sensitive apps. Settings > Apps > Photos > Use Face ID, plus Require Face ID on messaging and banking apps.
• Shield your passcode in public. Use Face ID instead of typing the code where people can see.

Where built-in tools fall short

Every built-in lock — Hidden album, locked notes, locked apps — falls back to the device passcode in some way. If a thief has your passcode and an unlocked phone, those locks open. Stolen Device Protection limits critical account changes; it does not encrypt your photos separately.

How sigil. helps

sigil. adds a second, independent secret for the photos that matter most.

• Not your passcode. Vaults are encrypted with a 256-bit key that only the sign you draw on a 5×5 grid can unlock, hardened with Argon2id and bound to the phone's secure chip. A thief with your passcode still faces the dot grid. See pattern encryption.
• The key is not stored. The sign is not saved on the device; the key is recomputed each time you draw it. A wrong sign simply does not decrypt.
• A decoy, if pressured. If someone forces you to open the app, the decoy pattern opens a decoy vault with harmless photos and erases nothing; your real vault stays hidden. Your safety comes first — hand over the phone if that is what keeps you safe.
• Self-destruct, if you want it. A thief who tries to guess the sign gets growing waits between attempts. With self-destruct turned on (free, off by default), too many wrong signs within a time window — 50 in 24 hours by default — erase the vaults, with no warning shown. Unlike the decoy pattern, nobody has to force you: it reacts to guessing. It is irreversible, even with the recovery phrase.
• Recovery phrase. If you forget your sign, the 12-word recovery phrase is the way back in. We cannot reset it for you.

The honest limit: sigil. is local-first and has no cloud backup yet. If the phone is gone, so are the vaults stored on it. Keep a separate encrypted backup of anything irreplaceable; see backing up private photos securely.

Checklist

1. Turn on Stolen Device Protection today.
2. Use at least a six-digit passcode, ideally alphanumeric.
3. Make sure you can sign in to Find My from another device.
4. Move private photos into an encrypted vault with a sign nobody has seen you draw.
5. Store your recovery phrase offline, away from the phone.
6. Back up irreplaceable photos separately.
7. If the phone is gone: Mark As Lost, secure your Apple Account, erase if needed.