Protect Private Photos Before an iPhone Repair

The best way to protect private photos during a repair is to make sure the technician never needs to unlock the phone — and, if they do, that your private photos are not readable with the phone passcode. Back up, ask whether the repair needs your passcode, and keep sensitive photos in encrypted storage whose key is separate from the passcode.

The situation and the real risk

A cracked screen or a dying battery means handing your phone to a stranger for hours or days. Most technicians are professional and uninterested in your camera roll. But a repair is one of the few times someone you do not know has physical access to your phone, sometimes along with your passcode, in a back room you cannot see.

The risk is not dramatic hacking. It is ordinary access: a passcode written on a ticket, a phone left unlocked on a bench, a curious employee scrolling through Photos. There have been publicized cases of repair staff copying private images from customers' devices. It does not happen often, but it is a known pattern, and it is cheap to prevent.

What you can do with built-in iOS tools

Apple publishes official steps in "Prepare your iPhone or iPad for a service appointment." In summary:

• Back up first. Use iCloud backup or a computer backup. Repairs sometimes end with a replaced or erased device.
• Find My. Apple may not service a device with Find My on. You can turn it off in Settings > [your name] > Find My. On iOS 27 and later, Apple offers Ready for Repair: in the Find My app, select the device, tap More > Repair or Trade In > Enable. Find My stays on during eligible repairs and turns off automatically when the technician marks the repair complete.
• Remove Wallet cards and turn off Apple Cash if you are mailing the device to Apple.
• Erase if you can. If you are mailing the phone in, Apple recommends erasing it. For an independent shop, erasing is still the most private option when your backup is solid.
• Ask about the passcode. Many hardware repairs can be tested without unlocking. If the shop insists, ask why, and consider changing your passcode to a temporary one, then changing it back afterward.
• Lock what you can. Keep the Hidden album behind Face ID (Settings > Apps > Photos > Use Face ID), and lock sensitive apps with Require Face ID from the long-press menu. Our guide to locking the Hidden album has the details.

Where built-in tools fall short

If you hand over your passcode, the built-in locks have a weak point: on most setups, Face ID protection for the Hidden album and locked apps falls back to the device passcode. A technician with the passcode can open them. Erasing the phone solves this, but it is not always practical — a broken screen may make a full backup and restore difficult, and many people simply do not have the time.

How sigil. helps

sigil. encrypts each vault with a 256-bit key that only the sign you draw on a 5×5 grid can unlock. That sign is not your phone passcode and is never stored on the phone, so a technician with your passcode sees an app that asks for a sign — nothing more. See pattern encryption for the technical details.

• Photos you take with the private camera never land in the Camera Roll, so they are not part of what a technician might browse in Photos.
• The disguised icon makes the app look like a utility, which avoids drawing attention during a quick look.
• Keep your recovery phrase written down before service; it is the only way back in if you forget your sign. Be aware that sigil. is local-first and has no cloud backup of its own yet. If the phone might be erased or replaced, keep a separate secure copy of anything you cannot afford to lose — our guide to backing up private photos securely covers the options.

Before-repair checklist

1. Make a full backup and confirm it finished.
2. Move sensitive photos into an encrypted vault, then delete the originals from Photos and empty Recently Deleted.
3. Confirm your recovery phrase is written down somewhere safe, away from the phone.
4. Set up Ready for Repair (iOS 27+) or turn off Find My if the repair requires it.
5. Ask whether the repair needs your passcode. If it does, use a temporary passcode.
6. Erase the phone if you are mailing it in or if you want maximum privacy.
7. After pickup, change your passcode back, re-enable Find My if you turned it off, and check that everything works.

Related situations

Repair shops are one version of a broader problem: someone else holding your unlocked phone. If it is a friend rather than a technician, see lending your phone. If the phone never comes back, see what to do if your phone is lost or stolen. And before you share any photo from a repaired or replacement phone, the EXIF remover can strip location data in your browser.