How-to · 9 min read

How to store important documents on your phone without uploading them anywhere

Cloud storage is not the only option, and for identity documents it is often the wrong one. A practical method that keeps everything on the device — and deals honestly with the backup problem that creates.

The default advice is to put important documents in cloud storage. It is not bad advice exactly — a scan of your degree certificate in a cloud drive is better than no scan at all. But identity documents are a specific category, and the reasoning that makes cloud storage good for holiday photos does not transfer cleanly to a passport.

Cloud storage optimises for availability. You want your files everywhere, on every device, recoverable if the laptop dies. Identity documents optimise for the opposite thing: you want them in as few places as possible, and you want to know exactly which places those are. Those two goals point in different directions, and most people never notice because the default is chosen for them.

What "on the device" actually means

Keeping something on the device is not the same as keeping it in your camera roll, and this is where most attempts fall down.

Your camera roll is not local storage in any meaningful sense. On a modern phone with default settings, a photo taken today exists on the device, in your cloud photo library, on any other device signed into that account, and in whatever backup runs overnight. It is the most widely-replicated folder you own. Moving a passport scan "out of the cloud" by leaving it in the camera roll accomplishes nothing.

Genuinely on-device means the file is written into an app's private storage, encrypted, and excluded from the automatic backups that would otherwise carry it off. Ideally it also never appears in a system photo picker, because every app you grant photo access to can then read it.

The method

This is what a sensible setup looks like. It takes an evening once and then a few minutes a year.

1. Decide what actually needs to be there

People either store nothing or store everything, and everything is its own problem — a vault with two hundred items is a vault you cannot find anything in.

A useful working list, for most people, is short: passport, national ID card, driving licence, birth certificate, marriage certificate if relevant, education certificates, the current insurance policy, the tenancy or mortgage document, vehicle registration, and the front of any card you would need to cancel. Add professional licences if your job requires them.

That is somewhere between eight and fifteen items. If your list is running past thirty, you have started filing rather than protecting, and the two need different tools.

2. Capture properly, once

Bad scans are the reason people end up with four copies of the same document — the first was blurry, the second cut off the corner, so they took another.

Photograph on a flat, plain, non-reflective surface in daylight, not under a ceiling light directly overhead, which is what produces the glare band across the middle of every passport photo ever taken. Fill the frame. Get all four corners. For anything with two sides, capture both — a licence without its reverse is missing exactly the details somebody will ask you for.

Check each capture before you move on. It is far easier to retake a photo while the document is still on the table than to discover next year that the expiry date is unreadable.

3. Put it somewhere that is actually locked

The destination needs three properties, and it is worth being fussy.

Encrypted at rest. The file itself, not just the phone. A device passcode protects against a stranger picking up a locked phone. It does nothing once the phone is unlocked, which is the state it spends most of its life in.

A separate lock. Your documents should need something your phone unlock does not give. The moment you hand your unlocked phone to a colleague, everything protected only by the phone passcode is available to them. A second PIN is what makes handing over your phone safe again.

Excluded from automatic backup. Otherwise the file you carefully kept on the device gets copied into a cloud backup anyway, and you have the illusion of local storage rather than the fact of it.

4. Solve the backup problem deliberately

Here is the honest tension in offline storage, and anyone who does not raise it is selling you something: a phone is a single point of failure. Phones get lost, stolen, dropped in water, and reset by repair shops. If your only copy is on one device, you have traded a privacy risk for an availability risk.

The answer is not to give up and use the cloud. It is to make the backup an object you control:

• An encrypted export file. One file, protected by a passphrase, that you can restore from. Keep it on a USB stick in a drawer, or on a home computer, or on a cloud drive — because if the file itself is encrypted with a passphrase only you hold, storing it in the cloud is no longer the same act as storing your documents in the cloud.
• A passphrase you will actually still have. Written down and kept physically, with the will or the house documents. Not in your email. Not in a note on the same phone.
• A refresh habit. Once a year, when you do anything else annual, export again.

That last one matters more than it sounds. Most backup failures are not corrupted files, they are backups from before the thing you now need.

5. Clean up the trail

This is the step everyone skips and it is the one that does the most work. Storing a document securely is pointless if six unmanaged copies remain.

Search your photo library. Search your email for attachments — most people have emailed themselves a scan. Go through chat apps, sent and received. Check your downloads folder, both phone and computer. Check any cloud drive you have ever used, including the free one that came with something.

Then delete, and empty the deleted items, and confirm the cloud copy went too. On several services, removing a photo from the phone leaves it in the web interface indefinitely.

6. Change what you do next time

None of the above matters if next month you photograph your passport for a hotel and leave it in the camera roll again.

The habit that works: when somebody asks for a document, share it from the vault, and if that means taking a fresh photo, delete the fresh photo the same day. Treat a document photo in your camera roll as something with a shelf life of hours, not years.

And prefer channels that expire. Sending your passport over a chat app means it now lives on the recipient's phone, in their backup, and in their cloud account — three places entirely outside your control, belonging to someone who will change jobs.

What you end up with

A dozen documents, on one phone, encrypted, behind a lock that is not your phone unlock. One encrypted backup file in a drawer. No copies in your camera roll, your email or your chat history. A list you can actually recite of where your identity documents are.

It is not glamorous and it will not make you invulnerable. But the failure modes it removes — the swipe, the trade-in, the repair shop, the shared album, the forgotten backup — are the ones that actually happen to people, and they are entirely preventable with an evening's work.