Guide
How to send private photos securely from iPhone
To send a private photo securely from iPhone, use iMessage or AirDrop, which are encrypted end to end, and turn off Location in the share sheet’s Options first so the photo doesn’t reveal where it was taken. Avoid public “anyone with the link” sharing for anything sensitive. If you want to choose how long the person can open it, and to be able to remove access later, send a read-only copy whose key travels only inside the link.
Settings checked against Apple’s iPhone User Guide (iOS 18 and iOS 27), Apple’s AirDrop guide and Apple’s iCloud data security overview on Oct 24, 2026.
Before you send: remove the location
Photos taken with Location Services on carry the place they were taken, often precise enough to find a home.
- In Photos, open the photo (or select several) and tap Share.
- At the top of the share sheet, tap Options.
- Turn off Location, then tap Done.
This applies to that share only.
To stop the camera recording location at all: Settings → Privacy & Security → Location Services → Camera → Never. Or use our photo metadata remover, which runs in your browser and uploads nothing.
The options compared
| Method | Encrypted end to end? | Recipient keeps a copy? | Can you take it back? |
|---|---|---|---|
| iMessage (blue bubbles) | Yes | Yes, in their Messages and backups | Unsend works only for a few minutes, and they may already have seen it |
| SMS / MMS (green bubbles) | No | Yes | No |
| AirDrop | Encrypted in transit, nearby only | Yes, in their Photos or Files | No |
| iCloud link (iOS 18 share Options) | No: “anyone with the link” sharing isn’t covered by Advanced Data Protection | They can download it | Links expire after 30 days |
| Shared Album | No, even with Advanced Data Protection | They can save it | You can remove items or people |
| Vault Sharing (Bunker) | Yes; the key is only in the link | Read-only copy in Bunker on their device; saving off by default | Remove Access stops future opens |
Messages
iMessage is end-to-end encrypted. Apple can’t read your photos on the way. Two caveats:
- Green bubbles aren’t iMessage. SMS and MMS aren’t end-to-end encrypted. If the bubble is green, don’t send anything sensitive.
- The copy is theirs. Once delivered, the photo lives in the other person’s Messages, in their iCloud or device backups, and on any device they’ve signed in to.
AirDrop
AirDrop is good for handing photos to someone in the same room. Apple says transfers are encrypted and the recipient accepts or declines each one. To control who can send to you: open Control Center, touch and hold the top-left group of controls, tap AirDrop, and choose Contacts Only or Everyone for 10 Minutes.
Since iOS 26.2, you can give someone who isn’t in your contacts a one-time AirDrop code instead, so you can stay on Contacts Only. The limit is the same as Messages: the recipient keeps a full copy.
iCloud links and Shared Albums
On iOS 18, the share sheet’s Options include iCloud Link, which sends a URL instead of the file; Apple says these links are available for 30 days. Shared Albums let a group view and add photos.
Both are convenient, and both sit outside end-to-end encryption. Apple’s own overview says Shared Albums and “anyone with the link” sharing aren’t covered by Advanced Data Protection. So anyone who gets the link can open it, and Apple holds the keys. See Advanced Data Protection, explained.
Sending a revocable copy with Vault Sharing
Vault Sharing is built for the photos you’d hesitate to send any other way. You send a read-only copy of a whole vault or chosen items, with rules you set.
How the key travels. Each share gets its own random key. Bunker shows it to you as a link (usebunker.app/s/#…), a QR code, and a 24-word code you can read aloud. The key is the part after the #, called the fragment. Browsers never send the fragment to a server, so our website never sees it, and the encrypted copy stored in iCloud can’t be opened without it. Our share page also clears the fragment from the address bar as soon as it loads.
How to send one:
- In the vault, open Vault Settings → Sharing and tap New Share, or select items and share them.
- Add who it’s For (only you see this) and your name as it should appear to them.
- Set the Rules: Expires (never, or after a number of days), Opens Allowed, Allow Saving & Export (off by default), and Lock on Screenshot (on by default).
- Tap Create Share, then tap Send Link, or read out the 24-word code.
The link works once: the first person to open it in Bunker claims the copy and sets a Pattern for it, and Bunker won’t open that link or code again.
What the recipient needs: Bunker on an iPhone, iPad or Mac, and to be signed in to iCloud. Receiving is free. Creating shares is part of Bunker Pro.
Removing access: open Sharing, choose the share and tap Remove Access. Their copy is deleted from their device the next time they open it while online.
The limits, plainly:
- The rules, “works once” included, are enforced by the Bunker app, not by the encryption. Until you remove access or the share expires, someone who has the key and works around the app could still read the copy. Treat the link like the photos themselves.
- The link can end up in browser history, which may sync through iCloud. If that worries you, tap Send Code Instead and send the 24-word code.
- Removing access can’t take back what was already seen. Nobody can stop someone photographing their screen, so share only with people you trust.
- A share holds up to 500 MB.
When you don’t need an app
For everyday photos to people you trust, iMessage with Location turned off is secure and simple, and AirDrop is perfect in the same room. A revocable share matters when the photo is sensitive, when you want an end date, or when you’d want to stop access later.
Related: how to store passport and ID copies safely, how to keep private photos out of iCloud, and Bunker’s security overview.
Questions
Is iMessage safe for sending private photos?
iMessage is end-to-end encrypted, so Apple can't read the photos in transit. But the recipient keeps a full copy, it lands in their backups, and anyone with their unlocked phone can see it.
Is AirDrop encrypted?
Yes. Apple says AirDrop transfers are encrypted and the recipient accepts or declines each one. It only works with devices nearby, within about 30 feet.
Can I unsend a photo?
In iMessage you can unsend a recent message on recent iOS versions, but the other person may already have seen or saved it. Vault Sharing in Bunker lets you remove access at any time, with the same honest limit: what was already seen can't be taken back.
Do photos I send include my location?
They can. Photos taken with Location Services on carry the place they were taken. Turn off Location in the share sheet's Options, or export from Bunker with "Remove location and camera details" on.