How to store your ID documents safely on your phone
Keep them in an app that encrypts each document on your phone and opens only with Face ID or Touch ID, not in your camera roll, a chat or your email. Those places are built to show, sync and share photos, so a document kept there reaches further than you meant.
A passport scan is useful for looking up a number or preparing a requested copy. Give it a protected home before clearing the loose copies from Photos, chats or email. A stored copy does not replace the original when an authority requires it.
What a safe home for a document looks like
Whatever app you choose, the checklist is the same. A place trusted with identity documents should offer:
- Encryption on the device. Documents are stored encrypted, not as loose images in a shared library.
- A lock of its own. Face ID or Touch ID guards the documents even when the phone itself is unlocked and in someone else's hands.
- No account, and nothing sent to the developer. No server of theirs ever receives your documents, so there is nothing on their side to leak or sell.
- Sync you control. If copies reach your other devices, they travel through your own cloud account, opt-in, never through the developer's.
- Offline access. A border checkpoint has no Wi-Fi. Documents must open with no signal at all.
- Sharing that protects the original. A copy you send should carry who it is for and when, while the original stays untouched.
- Expiry awareness. The app should know when each document runs out and say so before it matters.
Where document photos usually end up
The camera roll
A photo library is built for showing, not guarding. Apple locks the Hidden album behind Face ID, and since iOS 18 you can lock the Photos app itself, but short of that, a passport between vacation shots surfaces in searches, in automatic albums and widgets, and on the screen you hand to a friend. Locked or not, it stays a loose photo: it syncs and shares like any picture, and nothing files it as a document or tracks when it expires.
A chat with yourself
Sending your ID to yourself in a messaging app feels like a shortcut, but the copy now lives in a chat history and in that platform's backups, under rules you do not control. Deleting the message later does not recall the copies it left behind.
An email to yourself
A document mailed to yourself sits on a mail server indefinitely, findable by anyone who ever gets into the account. Mail accounts are among the most attacked doors on the internet, and the attachment is the prize.
A folder in a cloud drive
Cloud drives are made for sharing, and that is exactly the risk: one mistaken share link, one browser left signed in, and the folder named after your documents is the first thing anyone opens.
A notes app
Notes can hold a scan, and some can be locked, but they scatter documents across pages, offer no protected way to share a copy, and never warn you that the ID inside expired last month.
What an ID in Apple Wallet covers, and what it leaves to you
If your state issues IDs to Apple Wallet, or you hold a US passport, your iPhone can carry an official credential. A driver's license or state ID reaches Wallet once your state approves it, and a Digital ID is created by reading the chip in your passport. Either one can be presented at TSA checkpoints before domestic flights and at select businesses, apps and websites. See which states and IDs qualify.
It leaves the rest to you. Apple says the Digital ID is not a passport and cannot be used for international travel or to cross a border, so the passport book still goes with you. TSA asks travelers to carry a physical, acceptable ID even when they present a digital one. A Social Security card or a birth certificate has no Wallet version. And a landlord or an employer who asks for a copy of your ID still gets a scan of the card: Wallet presents your ID to readers, apps and websites that request it, and Apple blocks screenshots of a Wallet license's information screen.
That scan, and the photo of each document you keep for a lost wallet or a long form, is what still needs a safe home.
How Dokus measures up
Dokus is a document wallet for iPhone, iPad and Mac built to that exact checklist, because the checklist is what we demanded before trusting an app with our own passports.
Documents are encrypted on your device and open only behind Face ID or Touch ID. There is no Dokus account, and your documents never reach a Dokus server: we never receive, store, or analyze them. iCloud sync is opt-in and runs through your own Apple Account, so the same wallet follows you across your devices without ever touching ours. Everything works offline. A shared copy can carry a watermark naming who it is for, while the original never changes. Dokus Plus adds expiration reminders when you record the date and enable them. Even screenshots of your documents come out blank.
If the original has already gone missing, see how to replace lost documents in the US for the issuing agencies and the steps for each document. Keep a copy for reference while you arrange the replacement.
Common questions
Is it safe to keep a photo of my passport in my camera roll?
It is common, and better than being stranded with nothing. Apple locks the Hidden album behind Face ID, and since iOS 18 you can lock Photos itself, but otherwise the library opens for anyone holding your unlocked phone, and a passport there shows up in searches and albums. Hidden or not, it stays a loose photo that syncs and shares like any other. A wallet app that encrypts documents and puts them behind Face ID is the safer habit.
What is the safest way to store identity documents on an iPhone?
Use an app built for documents rather than a general-purpose place like the camera roll or a cloud folder. Look for encryption on the device, a biometric lock, no account with the developer and no copy on its servers, offline access, and controlled sharing. Dokus was built to meet every point on that list, and it is free to download on the App Store.
Should I upload scans of my ID to a cloud drive?
A cloud drive protects a scan only as well as the account around it, and every share link and signed-in browser widens the circle. If a document has to reach your other devices, prefer an app where sync is opt-in and runs through your own account, and where a shared copy can be watermarked so it cannot be quietly reused.
What makes a document wallet app trustworthy?
Read its privacy policy and check three things: documents are encrypted on the device, no company server receives them, and the business model is a price, not your data. Dokus meets all three, and its policy says so in plain language.
Does Dokus work offline, while traveling?
Yes. Your wallet lives on your device, so airplane mode, a foreign SIM or no signal at all changes nothing. If you use iCloud sync, it simply catches up when a connection returns.