How to store your identity documents safely
Sooner or later everyone carries their documents as photos: a passport snapped before a trip, an ID sent to a landlord, a driver's license kept around just in case. The habit is universal because it works.
The places those photos end up, though, were never designed to hold identity documents. This page looks at where document copies usually live, what each place means for your privacy, and what to demand from an app that is actually built for the job.
Where document photos usually end up
The camera roll
A photo library is built for showing, not guarding. A passport between vacation shots surfaces in searches, in automatic albums and widgets, and on the screen you hand to a friend. There is no second lock: whoever can open your photos can open your documents.
A chat with yourself
Sending your ID to yourself in a messaging app feels like a shortcut, but the copy now lives in a chat history and in that platform's backups, under rules you do not control. Deleting the message later does not recall the copies it left behind.
An email to yourself
A document mailed to yourself sits on a mail server indefinitely, findable by anyone who ever gets into the account. Mail accounts are among the most attacked doors on the internet, and the attachment is the prize.
A folder in a cloud drive
Cloud drives are made for sharing, and that is exactly the risk: one mistaken share link, one browser left signed in, and the folder named after your documents is the first thing anyone opens.
A notes app
Notes can hold a scan, and some can be locked, but they scatter documents across pages, offer no protected way to share a copy, and never warn you that the ID inside expired last month.
What a safe home for a document looks like
Whatever app you choose, the checklist is the same. A place trusted with identity documents should offer:
- Encryption on the device. Documents are stored encrypted, not as loose images in a shared library.
- A lock of its own. Face ID or Touch ID guards the documents even when the phone itself is unlocked and in someone else's hands.
- No account and no server. The developer never receives your documents, so there is nothing on their side to leak or sell.
- Sync you control. If copies reach your other devices, they travel through your own cloud account, opt-in, never through the developer's.
- Offline access. A border checkpoint has no Wi-Fi. Documents must open with no signal at all.
- Sharing that protects the original. A copy you send should carry who it is for and when, while the original stays untouched.
- Expiry awareness. The app should know when each document runs out and say so before it matters.
How Dokus measures up
Dokus is a document wallet for iPhone, iPad and Mac built to that exact checklist, because the checklist is what we demanded before trusting an app with our own passports.
Documents are encrypted on your device and open only behind Face ID or Touch ID. There is no Dokus account and no Dokus server: we never receive, store, or analyze your documents. iCloud sync is opt-in and runs through your own Apple Account, so the same wallet follows you across your devices without ever touching ours. Everything works offline. A shared copy can carry a watermark naming who it is for, while the original never changes. Give a document its expiry date and Dokus warns you in time to renew. Even screenshots of your documents come out blank.
The free version is the complete product, up to nine documents, sync included. Dokus Plus is a single one-time purchase, never a subscription, that lifts the cap and adds expiry reminders and sharing extras.
Common questions
Is it safe to keep a photo of my passport in my camera roll?
It is common, and better than being stranded with nothing, but a photo library gives a passport no lock of its own: it shows up in searches and albums, and anyone who can open your photos can open it. A wallet app that encrypts documents and puts them behind Face ID is the safer habit.
What is the safest way to store identity documents on an iPhone?
Use an app built for documents rather than a general-purpose place like the camera roll or a cloud folder. Look for encryption on the device, a biometric lock, no developer account or server behind the app, offline access, and controlled sharing. Dokus was built to meet every point on that list, and the free version is on the App Store.
Should I upload scans of my ID to a cloud drive?
A cloud drive protects a scan only as well as the account around it, and every share link and signed-in browser widens the circle. If a document has to reach your other devices, prefer an app where sync is opt-in and runs through your own account, and where a shared copy can be watermarked so it cannot be quietly reused.
What makes a document wallet app trustworthy?
Read its privacy policy and check three things: documents are encrypted on the device, no company server receives them, and the business model is a price, not your data. Dokus meets all three, and its policy says so in plain language.
Does Dokus work offline, while traveling?
Yes. Your wallet lives on your device, so airplane mode, a foreign SIM or no signal at all changes nothing. If you use iCloud sync, it simply catches up when a connection returns.