End-to-end encryption for photos: what it protects
End-to-end encryption means only the people at each end hold the keys, so the service in the middle cannot read the data. It protects photos while they travel or sit in a synced account. It does not protect them on an unlocked phone. A local vault is a different thing: nothing is sent anywhere.
What "end-to-end" means
Data moves from one place to another: your phone to a service to another phone, or your phone to a copy of your library in the cloud. With end-to-end encryption the data is scrambled on your device and unscrambled only on a device you or the recipient control. Apple describes its version this way: end-to-end encrypted data "can be decrypted only on your trusted devices where you're signed in to your Apple Account", and no one else can access it, "not even Apple".
Without it, data may still be encrypted in transit and on the server, but the company holds keys. That protects against outsiders on the network. It does not stop the company, or someone who compels or breaks into the company, from reading it.
iCloud Photos as an example
Apple documents two levels for iCloud:
- Standard data protection, the default. Apple's page says data is encrypted in transit and at rest, but Apple holds the keys, which is how it can help you recover data. Photos is listed there as encrypted in transit and on the server, not end-to-end.
- Advanced Data Protection for iCloud, optional. Apple says it adds Photos and Notes, among others, to the end-to-end encrypted categories. Shared Albums, and content shared with anyone who has the link, are the exception: they are not end-to-end encrypted even when it is on.
Apple's page also guides you to set up at least one recovery method, such as a recovery contact or a recovery key, before you turn it on, and says Apple cannot help recover that data without one.
So whether iCloud Photos is end-to-end encrypted depends on a setting you choose, and on whether you share.
What end-to-end encryption protects
- Photos in transit between devices.
- Photos stored with a provider, where the provider does not hold the key.
- A provider being breached, or being compelled to hand over what it holds.
What it does not protect
- An unlocked phone. The photo is decrypted on your device so you can see it. Anyone who has the unlocked phone sees it.
- The other end. The recipient can save, screenshot or forward a photo. Encryption on the way does not control what they do.
- Metadata. Who you share with, when, and how much is often visible to the service.
- Malware on either device.
- Your own mistakes. Sending the wrong photo to the right person, or the right photo to the wrong one.
A local vault is a different tool
End-to-end encryption is about moving or syncing data. A local vault is about storing it on one device. StrongRoom is a local vault. Your Vault is encrypted on your iPhone with AES-256-GCM, never sent anywhere, and excluded from iCloud and computer backups. There is no sync, so there is no end-to-end sync to evaluate.
Two things in StrongRoom involve moving data, both on your terms:
- Export Package. An encrypted file holding a whole Vault, which you save or send yourself. The Recovery Phrase decrypts it.
- Share Package. An encrypted selection of items for one person, opened with six words or a QR code that you send by a different route. Open count and expiry limits are enforced only by the recipient's app and can be bypassed by someone with skill. A file you have sent cannot be taken back.
These are encrypted files with a key you hand over separately, not a live end-to-end channel. Neither stops a recipient from saving or photographing what they open.
Choosing between them
If you want photos on several devices, or backed up for you, a synced service with end-to-end encryption suits that need. If you want photos stored where no service can reach them, and you accept that nothing is copied for you, a local vault does.
Keep reading
- Are iCloud Photos end-to-end encrypted?
- What is zero-knowledge encryption?
- Share Package feature
- Export Package feature
- Can Apple see my hidden photos?
- Local-only vaults compared with synced vaults
- Limits of Share Packages
Frequently asked questions
Is iCloud Photos end-to-end encrypted?
By default, no. Apple lists Photos as encrypted in transit and on the server, with Apple holding the keys. With Advanced Data Protection turned on, Photos is end-to-end encrypted, except Shared Albums.
Does end-to-end encryption protect me if someone has my unlocked phone?
No. The photo is decrypted on the device so you can view it.
Is StrongRoom end-to-end encrypted?
It does not sync or send anything, so the term does not apply to a Vault. A Share Package is an encrypted file opened with a phrase or QR code that you send separately.
Can a Share Package be recalled?
No. Once sent it cannot be taken back, and its limits are enforced only by the recipient's app.
Sources
- iCloud data security overview (Apple Support), checked on 2026-10-30.
- How to turn on Advanced Data Protection for iCloud (Apple Support), checked on 2026-10-30.