How to store your ID documents safely on your phone
Keep them in an app that encrypts each document on your phone and opens only with Face ID or Touch ID, not in your camera roll, a chat or your email. Those places are built to show, sync and share photos, so a document kept there reaches further than you meant.
Sooner or later everyone carries their documents as photos: a passport snapped before a trip, an ID sent to a landlord, a driver's license kept around just in case. The habit is universal because it works.
The places those photos end up, though, were never designed to hold identity documents. This page looks at where document copies usually live, what each place means for your privacy, and what to demand from an app that is actually built for the job.
Where document photos usually end up
The camera roll
A photo library is built for showing, not guarding. Apple locks the Hidden album behind Face ID, and since iOS 18 you can lock the Photos app itself, but short of that, a passport between vacation shots surfaces in searches, in automatic albums and widgets, and on the screen you hand to a friend. Locked or not, it stays a loose photo: it syncs and shares like any picture, and nothing files it as a document or tracks when it expires.
A chat with yourself
Sending your ID to yourself in a messaging app feels like a shortcut, but the copy now lives in a chat history and in that platform's backups, under rules you do not control. Deleting the message later does not recall the copies it left behind.
An email to yourself
A document mailed to yourself sits on a mail server indefinitely, findable by anyone who ever gets into the account. Mail accounts are among the most attacked doors on the internet, and the attachment is the prize.
A folder in a cloud drive
Cloud drives are made for sharing, and that is exactly the risk: one mistaken share link, one browser left signed in, and the folder named after your documents is the first thing anyone opens.
A notes app
Notes can hold a scan, and some can be locked, but they scatter documents across pages, offer no protected way to share a copy, and never warn you that the ID inside expired last month.
What a safe home for a document looks like
Whatever app you choose, the checklist is the same. A place trusted with identity documents should offer:
- Encryption on the device. Documents are stored encrypted, not as loose images in a shared library.
- A lock of its own. Face ID or Touch ID guards the documents even when the phone itself is unlocked and in someone else's hands.
- No account, and nothing sent to the developer. No server of theirs ever receives your documents, so there is nothing on their side to leak or sell.
- Sync you control. If copies reach your other devices, they travel through your own cloud account, opt-in, never through the developer's.
- Offline access. A border checkpoint has no Wi-Fi. Documents must open with no signal at all.
- Sharing that protects the original. A copy you send should carry who it is for and when, while the original stays untouched.
- Expiry awareness. The app should know when each document runs out and say so before it matters.
How Dokus measures up
Dokus is a document wallet for iPhone, iPad and Mac built to that exact checklist, because the checklist is what we demanded before trusting an app with our own passports.
Documents are encrypted on your device and open only behind Face ID or Touch ID. There is no Dokus account, and your documents never reach a Dokus server: we never receive, store, or analyze them. iCloud sync is opt-in and runs through your own Apple Account, so the same wallet follows you across your devices without ever touching ours. Everything works offline. A shared copy can carry a watermark naming who it is for, while the original never changes. Give a document its expiry date and Dokus warns you in time to renew. Even screenshots of your documents come out blank.
Common questions
Is it safe to keep a photo of my passport in my camera roll?
It is common, and better than being stranded with nothing. Apple locks the Hidden album behind Face ID, and since iOS 18 you can lock Photos itself, but otherwise the library opens for anyone holding your unlocked phone, and a passport there shows up in searches and albums. Hidden or not, it stays a loose photo that syncs and shares like any other. A wallet app that encrypts documents and puts them behind Face ID is the safer habit.
What is the safest way to store identity documents on an iPhone?
Use an app built for documents rather than a general-purpose place like the camera roll or a cloud folder. Look for encryption on the device, a biometric lock, no account with the developer and no copy on its servers, offline access, and controlled sharing. Dokus was built to meet every point on that list, and it is free to download on the App Store.
Should I upload scans of my ID to a cloud drive?
A cloud drive protects a scan only as well as the account around it, and every share link and signed-in browser widens the circle. If a document has to reach your other devices, prefer an app where sync is opt-in and runs through your own account, and where a shared copy can be watermarked so it cannot be quietly reused.
What makes a document wallet app trustworthy?
Read its privacy policy and check three things: documents are encrypted on the device, no company server receives them, and the business model is a price, not your data. Dokus meets all three, and its policy says so in plain language.
Does Dokus work offline, while traveling?
Yes. Your wallet lives on your device, so airplane mode, a foreign SIM or no signal at all changes nothing. If you use iCloud sync, it simply catches up when a connection returns.
