How to share photos securely from your iPhone
The safest routes send a photo directly to one person, over a channel that is encrypted end to end, and leave no link behind. Links and shared albums stay reachable until someone removes them. A StrongRoom Share Package sends an encrypted file with a separate key, but its limits are enforced only by the app on the recipient's phone.
Decide what you need first
Sharing has three separate risks, and different routes cover different ones.
- Someone intercepts it on the way. Encryption in transit helps.
- The wrong person gets it. Direct sending to a named person helps; links do not.
- It stays around afterwards. A copy stays on the recipient's phone, in their backups and in any service it passed through. No route can take a copy back from a person who has it.
The routes
Messages
Apple says blue-bubble iMessage conversations are protected end to end, and that SMS/MMS messages, shown in green, are not. A green bubble means the message went as RCS or SMS/MMS instead of iMessage, for example because the recipient does not have an Apple device or iMessage is off. Apple says RCS can be encrypted only in some circumstances, which depend on its newest software and on carrier support. Check the lock indicator at the top of the conversation before you send something private. A copy remains on both phones.
AirDrop
AirDrop sends directly to a nearby person. Apple's page says you choose to receive from Contacts Only or from Everyone for 10 Minutes, and that in iOS 16.2 and later the Everyone setting turns itself off after ten minutes. Both devices need Wi-Fi and Bluetooth on and the recipient must be nearby. It is a good route for a photo you hand to someone in the room. A copy remains on their phone.
Shared albums
Apple says the owner of an iCloud Shared Album can choose People You Choose or Anyone with the Link, and that an owner can remove subscribers at any time. There is also a separate Public Website setting, which Apple says publishes photos to a website anyone can see. That is the opposite of private. If a shared album is the route, use People You Choose, and check the list from time to time. The photos live in iCloud for as long as the album does.
Links and services
Any service that gives you a link makes the file reachable by anyone who has the link, unless the service restricts it. Read what the service says about who can open it, how long the link lasts and whether the file is stored on its servers. We did not test any service for this guide.
A Share Package from StrongRoom
A Share Package is an encrypted file of Items you choose. You send it any way you like, such as AirDrop, Messages or email, and you send the six-word phrase, or a QR code, a different way. You can limit how many times it opens (1 to 100) and set an expiry date, and choose whether the recipient may add the items to their own Vault. It needs no account and no network from the app.
The limits are real and so are the exceptions:
- They are enforced only by the app on the recipient's phone. Someone with the skill to modify the app, or a screen recorder, can get around them.
- StrongRoom cannot stop a screenshot or screen recording.
- A package cannot be taken back once sent. There is no revoking and no live shared Vault.
- Anyone with the file and the phrase or QR code can open it.
- The recipient needs the app to open it. -> /features/share-package/
A short guide to choosing
| Situation | Route |
|---|---|
| A photo for someone next to you | AirDrop, set to Contacts Only |
| One photo to a friend, any time | iMessage, if the lock indicator shows |
| A set of photos for several people | A shared album, People You Choose |
| A sensitive document for one person with a time limit you can live with | A Share Package, with the phrase sent a different way |
| Anything you must be able to delete afterwards | None of these can promise it |
Before you send
- Check what the photo shows and where it was taken. StrongRoom does not strip location data from imports and has no tool for it. If you need it removed, do that before you send.
- Send the key separately. If a route has a code or phrase, send it by a different channel.
- Assume a copy will remain. If that is a problem, do not send it.
For the checklist for choosing a vault, see the pillar. -> /guides/choosing-a-vault-app/how-to-choose-a-photo-vault-app/ For where the files live in a vault, see how vaults work. -> /guides/choosing-a-vault-app/how-photo-vault-apps-work/ For the difference between exporting and sharing, see the Export Package page. Export Package: your Vault as one encrypted file
Frequently asked questions
How do I send photos that expire?
A StrongRoom Share Package can have an expiry date and an open limit, but both are enforced only by the app on the recipient's phone and can be bypassed. No route can take back a copy someone already has.
Is AirDrop secure?
It sends directly to a nearby person. Set it to Contacts Only when you are not receiving from a stranger; Apple says Everyone for 10 Minutes switches off by itself after ten minutes.
Are iMessages encrypted?
Apple says blue-bubble iMessage conversations are end-to-end encrypted and SMS/MMS messages are not.
Can a Share Package be revoked?
No. Once sent it cannot be taken back.
Sources
- What is the difference between iMessage, RCS, and SMS/MMS? (Apple Support), checked on 2026-10-30.
- How to use AirDrop on your iPhone or iPad (Apple Support), checked on 2026-10-30.
- How to use Shared Albums in Photos on your iPhone, iPad, or Apple Vision Pro (Apple Support), checked on 2026-10-30.
- Create and join shared albums in Photos on iCloud.com (Apple Support), checked on 2026-10-30.