Phone security for journalists: where a local Vault fits
Start with the guidance written by press-freedom organisations, because threat models for journalists differ by country and story. A local Vault is a narrow tool inside that: it keeps photos and documents on one phone, encrypted, with no account and no cloud. It does not protect against a seized phone with coercion, spyware, or anything a source sends you. Read the guides below first and use a Vault only where it fits.
Read these first
- The Committee to Protect Journalists' Digital Safety Kit covers protecting online data and accounts, phishing, device security, encrypted communications and safer internet use. Its device section recommends encrypting phones, using device passcodes, keeping software updated and considering whether to turn off biometric unlocking. Its "Crossing borders" section is relevant to anyone travelling with a phone, and it warns that a device confiscated at a border should be assumed compromised.
- The Freedom of the Press Foundation publishes digital security education: guides on encrypted messaging, social media accounts, harassment and source protection.
These are written for your profession and kept up to date by people who work with journalists. This page is not a replacement for them or for your newsroom's security lead.
What a local Vault does
A photo taken in the iPhone Camera lands in your photo library, which apps with photo access can read and which syncs if you use iCloud Photos. If you decide that some images should not sit there, a Vault gives them a separate home.
- StrongRoom's in-app camera stores photos and videos directly in the Vault. They never touch the photo library. Photos are saved as high-quality JPEGs with no location data.
- Import from Photos or Files copies chosen items in. The app sees only what you pick. You can then delete the originals from your library; the app asks every time.
- Files are encrypted with their own keys, and deleting an item destroys its key.
- The app makes no network connections of its own, has no account and has no server. Nothing is uploaded.
- By default the Vault locks as soon as you leave the app, shows a blank app switcher, and slows repeated guessing.
Keeping source material off the cloud roll
If a source sends you a photo by a messenger, check where that app saves it. Some apps can save received media to the photo library, and from there it can sync. Settings differ by app, so check them for the one you use. Moving an item into a Vault copies it in, and you then delete the original from the library; but anything that has already synced may exist elsewhere, so deleting the local copy is not a guarantee. The safer routine is to receive, import and delete early, and to turn off automatic saving before the material arrives.
Metadata: what StrongRoom does not do
Photos carry metadata, such as the time and often the location. StrongRoom does not remove it. Importing keeps the file as it is, and sharing a Share Package sends the item as it is. If you must remove metadata, do it with another method before importing, and test it on a copy. Our guides on iPhone privacy settings describe what iOS offers. What is EXIF data in iPhone photos?
Working with a second copy
An Export Package is an encrypted copy of a whole Vault. It lets you restore on a new phone, but it is also another file that can be seized, so decide where it lives and who knows the Recovery Phrase. Keep the phrase on paper, apart from the file. If the work is dangerous, think about whether any copy should exist at all. The choice is yours, and there is no cloud copy to fall back on.
If your phone is taken
- The Vault is encrypted and slows guessing, but a person who forces you to unlock it, or who learns your pattern or passphrase, can open it. A passphrase is harder to guess than a pattern; use one if the risk is serious.
- If you use Pro, a Duress Vault erases every other Vault on the phone when opened, silently and for good. It may also be unlawful to destroy data during a search in some places. Get advice before you rely on it. Is a Duress Vault legal to use?
- Treat a seized phone as compromised, as CPJ advises.
Where StrongRoom does not help
- It does not protect a phone with spyware or a compromised operating system.
- It does not protect against seizure combined with coercion.
- It does not hide itself. The icon is on the Home Screen like any other.
- It does not encrypt messages or protect your accounts. Use the tools in the guides above.
- It does not remove metadata or blur faces.
- It does not back up for you; without an Export Package and the Recovery Phrase, a lost phone is a lost Vault.
Frequently asked questions
Is a Vault app enough for journalist phone security?
No. Use it for one narrow job, keeping files off the photo library and the cloud roll, alongside the practices in guides from press-freedom organisations.
Does StrongRoom upload anything?
No. It has no account and no server, and it makes no network connections of its own.
Can I keep a photo's location private?
StrongRoom does not remove location or other metadata from imported photos. Photos taken with its in-app camera carry no location data.
What if my phone is seized?
The Vault is encrypted, but it cannot protect against coercion or a compromised phone. Read the CPJ guidance on travel and device seizure.
Sources
- Digital Safety Kit (Committee to Protect Journalists), checked on 2026-10-30.
- Digital Security Education (Freedom of the Press Foundation), checked on 2026-10-30.