How to store important documents securely on iPhone

Your iPhone probably already holds more paperwork than your filing cabinet: a photo of your passport, a PDF of a blood test, a signed rental contract, last year's tax return, warranty receipts, your child's vaccination record. If you want to store documents securely on iPhone, the problem usually isn't that the phone is unsafe. It's that these files are scattered across places that open for anyone holding your unlocked phone.

This guide is the overview for documents (photos have their own guides). It covers where documents usually end up, the built-in ways to lock them, what an encrypted vault adds, and the mistakes that leave copies behind.

Which documents deserve a lock

Not every PDF is sensitive. The ones worth protecting are those that could be used against you, or would hurt to lose:

• Identity documents: passport, ID card, driver's licence, residence permit. These are what someone needs to open accounts in your name. There's a dedicated guide on storing your passport and ID safely.
• Medical records: test results, prescriptions, letters from specialists, insurance claims.
• Contracts and legal papers: leases, employment contracts, wills, separation or custody documents.
• Tax and bank papers: returns, payslips, statements, loan documents. They show your income, account numbers and address.
• Receipts and warranties: less private, but annoying to lose when something breaks.
• Kids' documents: birth certificates, school reports, medical and vaccination records. They carry the same personal details as your own papers.

Where documents end up today, and the risk of each

Where	How it gets there	The risk
Camera roll	You photograph a page	Syncs to every device on your Apple account, appears in search, Memories and the Photos widget, and apps with full photo access can read it
Files app	Downloads, scans, attachments you saved	No lock on files or folders; Files search and Recents show everything to anyone using the phone
Notes	Scans and pasted text	Unlocked notes are as open as anything else; only locked notes ask for a password
Email	Attachments sent to you, or to yourself	Stays in your inbox for years, on every device where you read mail, and in the sender's mailbox too
Messages and chat apps	Someone sent you a document	Kept in the conversation, often backed up, and visible to anyone scrolling the thread
Cloud drives	Synced folders	Protected by that account's password; anyone signed in on another device can open them

None of these places is reckless. The common problem is that they're all open to whoever has your phone unlocked or your account password, and most keep extra copies you've forgotten about.

The built-in ways to protect documents

Lock the Files app (iOS 18 and later)

1. Touch and hold the Files icon on the Home Screen.
2. Tap Require Face ID (or Require Touch ID / Require Passcode).
3. Authenticate to confirm.

This is quick, but it locks everything in Files with your iPhone's own unlock, so anyone who knows your passcode gets in. The guide to locking apps explains where app locks stop.

Scan paper into a locked note

Notes can scan a page and lock the note with a password that's separate from your iPhone passcode.

1. Set a Notes password: Settings → Apps → Notes → Password (on iOS 17, Settings → Notes → Password). Choose a separate password rather than your device passcode if you can.
2. In Notes, create a note, tap the attachment button and choose Scan Documents.
3. Hold the iPhone over the page. It captures automatically, or tap the shutter. Adjust the corners, tap Keep Scan, then Save.
4. Tap the More button (⋯) and tap Lock.

The catch: Apple says notes containing PDFs, audio, video, tags or Pages, Numbers and Keynote documents can't be locked. So you can't drop an existing PDF from Files into a note and lock it. And if you forget a separate Notes password, Apple can't recover notes locked with it.

Scan into Files instead

The Files app can also scan: open Files, go to the folder you want, tap the More button (⋯) and choose Scan Documents. The scan is saved as a PDF. That's handy for a clean multi-page PDF, but remember it lands in Files with no lock of its own.

Password-protect Pages, Numbers and Keynote documents

1. Open the document in Pages (or Numbers or Keynote).
2. Tap More (⋯), then Document Options (Spreadsheet Options in Numbers, Presentation Options in Keynote).
3. Tap Set Password, enter a password and optional hint, and tap Done.

Apple says a password-protected document is encrypted, and PDF and Word copies exported from it keep the password. It only works for documents you can open in these apps, one file at a time, and the file name stays visible in Files.

Turn on Advanced Data Protection for iCloud

If your documents live in iCloud Drive or iCloud Notes, Advanced Data Protection makes most iCloud data end-to-end encrypted, so only your trusted devices hold the keys. Go to Settings → [your name] → iCloud → Advanced Data Protection. It needs iOS 16.2 or later, two-factor authentication and a recovery contact or recovery key, and Apple notes it isn't available in every country or region. It protects your data on Apple's servers. It does nothing about someone using your unlocked phone.

Where the built-in options stop

Put together, the built-in tools leave gaps for documents:

• Your phone passcode is the key to most of them. Lock Files, Mail and Photos all open with it.
• Locked notes don't take PDFs or office files, which is what most important documents arrive as.
• Document passwords are one file at a time and only in Apple's iWork apps.
• File names still show. "Divorce agreement.pdf" or "Blood test results.pdf" in Recents says a lot, even if the content is locked.

What's missing is one place that takes any file type, opens with a secret other than your phone passcode, and hides names as well as contents. That's what an encrypted vault is for. If your main concern is simply keeping files out of sight, the guide on hiding files on iPhone goes deeper on that.

Storing documents in an encrypted vault

A vault app keeps documents in its own encrypted storage instead of in Files or Photos. VaultCave is one example, and here's how it handles documents:

• Any file type: PDFs, Word and Excel files, scans, images, ZIPs, audio.
• Its own key. Each vault opens with its own pattern or passcode, not your iPhone passcode. There's no Face ID unlock, by design.
• Documents open inside the vault. PDFs and documents are viewed within VaultCave, so reading one doesn't leave a decrypted copy sitting in Files.
• Names are encrypted too. File names, folders, thumbnails and the index are encrypted along with the files.
• Folders and search by name, so you can keep "Medical", "Tax 2025" and "Kids" apart and find a file quickly.

To get documents in:

1. From Files: open VaultCave, draw your pattern, tap + and choose Files, then pick the documents.
2. From another app: in Mail, Safari or a chat app, tap Share and choose Save to VaultCave, then draw your pattern to pick the vault.
3. With "Open in…": when an app offers to open a document elsewhere, choose VaultCave.
4. From paper: photograph the page with VaultCave's built-in camera, which never saves to the camera roll.
5. On iPad: drag and drop files into the vault.

Backups matter as much as locks for documents you can't replace. VaultCave offers an optional encrypted backup to your own iCloud, on by default at setup. It's encrypted before it leaves the phone, so neither Apple nor VaultCave can read it, and it can only be restored with the vault's 12-word recovery phrase. Here's how to store that phrase. The full encryption model is on the security page.

When you need to send a document, exporting creates a readable copy and VaultCave warns you first. The free tier holds up to 100 items in one vault; unlimited items and multiple hidden vaults are Pro.

Comparing your options

Option	Takes any file type?	Separate from phone passcode?	Hides file names?	Backup
Camera roll	Photos only	No	No	iCloud Photos
Files app, locked (iOS 18+)	Yes	No	No	iCloud Drive, if used
Locked note	Scans, photos, text; no PDFs	Yes, with a Notes-only password	Yes	iCloud Notes, if used
Pages/Numbers/Keynote password	iWork files and their exports	Yes	No	Wherever the file is stored
Encrypted vault (VaultCave)	Yes	Yes	Yes	Optional encrypted iCloud backup, restored with the recovery phrase

Honest limits

• A vault can't block screenshots or someone photographing your screen while a document is open.
• Someone who watches you unlock can open that vault.
• A compromised or jailbroken phone can expose an open vault.
• Exported copies are readable once they leave the vault.
• Forget both the pattern and the recovery phrase and nobody can open the vault, VaultCave included.
• No sync between devices yet. Each iPhone or iPad has its own vaults; a backup restores a vault onto a new device.
• VaultCave is new, not yet on the App Store, and hasn't had an independent security audit yet.

A digital copy also isn't a legal original. Keep official papers, and ask a professional which records you're required to keep and for how long.

Mistakes to avoid

• Leaving the originals behind. After moving a document somewhere safer, delete it from Files and clear Recently Deleted under Browse, and empty Recently Deleted in Photos for page photos.
• Forgetting the email or chat it came in. The attachment is still there. Delete it if it matters.
• Emailing documents to yourself as a backup. It creates another copy in a place with no extra lock.
• Using your iPhone passcode for everything. If your Notes password or vault code matches it, one leak opens all of them.
• Having no backup. A locked document on a lost phone is still lost. Check that your backup is current before you travel.

The short version

• Important documents usually sit in the camera roll, Files, email and chats, all open to anyone using your unlocked phone.
• Built in: lock the Files app, scan paper into a locked note with its own password, set passwords on Pages documents, and turn on Advanced Data Protection for iCloud.
• Those tools don't cover PDFs in notes, hide file names, or give you a key separate from your passcode.
• An encrypted vault holds any file type behind its own code, opens documents inside the vault and can back them up encrypted.
• Delete leftover copies, keep the paper originals, and store your recovery phrase safely.