How to Store Documents Securely on Your Phone: IDs, PDFs, Screenshots
Passport scans, tax PDFs, bank screenshots and medical letters end up loose in Photos and Files. Where to keep them instead on iPhone and Android, ranked by privacy.
Phones have become the filing cabinet: the passport scan from a hotel, the insurance card, the lease PDF, the screenshot of a bank transfer, the photo of a credit card taken “just for now”. They arrive through different apps and stay wherever they landed. Here is where those files end up, what each location exposes, and where to put them instead.
Where documents hide on a phone
- Photos / Gallery — scans and screenshots. Synced to iCloud or Google Photos, searchable by text content on both platforms, visible to any app with photo access.
- Files / iCloud Drive / Google Drive — PDFs and downloads. Synced by default, surfaced in Recents, no separate lock.
- Downloads (Android) — everything a browser ever saved. Rarely cleaned.
- Chat apps — WhatsApp and Telegram keep received documents in their own folders and often in the gallery too.
- Mail attachments — cached on the phone and in the account.
The common feature: no lock beyond the phone’s, and a cloud copy you did not consciously make.
Option 1: Locked notes (iPhone) — free, limited
Apple Notes can lock a note with a password or your device passcode, and attached photos and scans go with it. Locked notes are end-to-end encrypted.
Good for: a few text secrets and one or two scans. Limits: the note title shows in the list; “use device passcode” makes the lock no stronger than the phone’s; PDFs attach awkwardly; it is not a document browser.
Option 2: Password-protected PDFs — free, per file
iPhone’s Preview (via the share sheet → Lock PDF) and many Android PDF apps can set a password on a single PDF.
Good for: one file you need to email. Limits: one password per file, nothing for images or screenshots, and the file still sits in Files and syncs.
Option 3: Samsung Secure Folder (Galaxy) — strong, brand-locked
A Knox container with its own lock that can hold a Files app and a gallery.
Good for: Galaxy owners who want a second private environment. Limits: Samsung only; most people set the same lock as the phone; heavier than needed for a dozen PDFs.
Option 4: A document vault app — one lock, every file type
TuckVault’s document vault holds PDFs, scans, screenshots and photos of documents together, encrypted on the device with AES, behind a PIN or pattern that is separate from the phone’s lock. Nothing syncs to any cloud.
- Scan or save the document as usual.
- Share it to TuckVault (or import from Files / Photos).
- Delete the loose copy — from Photos, Files, Downloads or the chat — and from that app’s bin or iCloud Drive’s Recently Deleted.
- Open it inside the vault when you need it; export only to share.
Good for: the whole filing cabinet, with one lock. Limits: no cloud backup, so keep one other private copy of anything irreplaceable; deleting the app deletes the vault.
What goes in the vault
IDs and passports · insurance and medical letters · tax forms and payslips · bank and payment screenshots · leases and contracts · tickets and boarding passes for the trip · serial numbers, warranty receipts, Wi-Fi passwords · two-factor backup codes.
What does not: the only copy of anything. Originals and official records live where they are supposed to; the vault holds your working copy.
The leftovers checklist
After moving a document into the vault, check each of these once: Photos → Recently Deleted · Files → Recently Deleted (iCloud Drive) · Downloads · the chat app’s media folder · Google Photos / iCloud Photos Trash · Mail attachments you saved. That is the step that makes the vault worth having, and it is the one everyone skips.
Lock what's private. Clear what isn't.
TuckVault keeps your private photos, videos and documents behind a PIN or pattern with AES encryption on your device — and cleans up duplicates, large videos and messy contacts on the same phone. Free to download for iPhone and Android.
Frequently asked questions
Is it safe to keep a photo of my passport on my phone?
Only if it is locked and the loose copies are gone. A passport photo in the camera roll syncs to the cloud, appears in search, and is one swipe away on an unlocked phone. In a vault with its own PIN, it is as safe as the phone itself plus one more lock.
Should I keep documents in Files or Google Drive?
For working files, fine. For sensitive ones, no: both sync to the cloud by default, neither has a separate lock, and both surface files in Recents and search. Use them for the copy you share, and the vault for the copy you keep.
Can I scan directly into the vault?
Scan with the phone's camera, the Files/Notes scanner or any scanner app, then share the result to TuckVault and delete the original. On iPhone, the Files scanner saves to iCloud Drive by default — delete that copy too.
What about screenshots of bank apps and codes?
Treat them as documents: import into the vault, delete from the camera roll, empty Recently Deleted. Better still, stop taking them — most bank apps let you export a statement PDF instead.