You photograph your passport for a visa form, scan your driver's license for a rental, and send your ID to a landlord over a chat app. Each time, a new copy lands somewhere on your phone. A year later there might be six of them, and you wouldn't be able to say where. Here's how to find every copy, cut them down to one, and keep that one where it's protected but still easy to reach.
Why One Copy Is the Goal
A scan of your passport or national ID is genuinely useful. If the original is lost or stolen abroad, a copy makes the replacement process easier, and some hotels, landlords and employers ask for one.
It's also exactly what someone needs to open accounts or pass identity checks in your name. A good scan shows your full name, date of birth, photo, signature and document number in one image. So the aim isn't to have no copy at all. It's to have one copy you chose to keep, behind its own lock, instead of several you forgot about.
Step 1: Find Every Copy
Copies hide in more places than most people expect. Go through these one at a time:
| Where | How to check |
|---|---|
| Photo library | Search for "passport", "license" or "ID". The Photos app on iPhone and Google Photos on Android both find text and objects inside images, so scans and phone photos of documents usually show up |
| Screenshots | Screenshots of a booking page or an app that showed your ID end up in the same library. Scroll the Screenshots album too |
| Files and Downloads | PDFs from scanner apps, forms you filled in, and attachments you opened all land here. Sort by name or search for "passport" and "scan" |
| Search sent mail and attachments for "passport", "ID" and "copy". Check your own address too, if you ever emailed a copy to yourself | |
| Chat apps | Look at the media and documents section of every chat where you sent an ID: landlords, employers, visa agents, family |
| Notes and scanner apps | Notes apps and document scanners often keep their own copy of every page you scanned |
Chat apps are the ones people miss. On Android, WhatsApp's own help page says its media visibility setting, which shows downloaded media in your phone's gallery, is on by default. On iPhone the matching setting is Save to Photos. Either way, a document someone sent you, or one you received back, can end up in your main photo library.
Step 2: Delete the Extras
Once you know where the copies are, pick the best one, usually the clearest full-page scan, and delete the rest:
- Photos: delete them, then open Recently Deleted (iPhone) or Trash (Google Photos) and empty it. Apple keeps deleted photos in Recently Deleted for 30 days before they're removed for good, so skipping this step leaves them on the phone for another month.
- Email: delete the message in sent mail and in any folder it was filed to, then empty the mail trash.
- Chats: delete the image or file from the conversation on your side. You can't remove the copy the other person received, which is a good reason to share less next time (more on that below).
- Downloads and scanner apps: delete the file and check the app doesn't keep a backup copy of its own.
If your photos back up to a cloud service, deleting on the phone usually deletes the cloud copy too, after the same trash period. It's worth opening the web version once to confirm the scans are gone.
Step 3: Keep One Copy Behind Its Own Lock
The copy you keep should need more than your phone's passcode to open, because plenty of people know or can watch you type that. Your options, roughly from weakest to strongest:
| Option | What it does | What it doesn't |
|---|---|---|
| Main photo library | Easy to find | Anyone scrolling your photos sees it, and it syncs wherever your photos sync |
| iPhone Hidden album | Since iOS 16, Apple locks it with Face ID, Touch ID or your passcode by default, and the scan no longer shows in your library | It's a lock on the album, not separate encryption. Anyone with your passcode can open it |
| Android private space | A separate area with its own lock, on Android 15 and later | Only for the phone's main user, and not on every phone |
| Encrypted vault app | The file is encrypted on your device and opens only with the vault's own PIN or pattern | You need to remember that second lock, and set up its recovery |
Whatever you choose, the point is the same: one copy, out of your camera roll, behind a lock that isn't the one you use fifty times a day.
Keep a Backup Away From Your Phone
A copy that only lives on your phone disappears with the phone, which is often when you need it most. Keep a second copy somewhere separate: an encrypted file on a computer, an encrypted USB drive at home, or a paper photocopy with someone you trust. Keep it away from the original passport, so one lost bag doesn't take both.
Our important documents checklist covers where the originals belong and how to store the rest of your documents.
When Someone Asks for a Copy
Most new copies start with a request. Before you send one:
- Check they actually need it. A booking confirmation sometimes asks for an ID "for verification" when showing it in person would do.
- Send only what they need. If the request allows it, cover the details they don't need, such as the document number or date of birth, before you send.
- Use one channel you trust, and don't post the photo in a group chat.
- Strip the photo's location. A document photographed on your phone can carry the place it was taken. Our free EXIF remover shows that data and removes it before you share.
- Delete it from your side afterwards, so the chat or sent folder doesn't become the next stray copy.
For the other files that shouldn't sit unprotected on your devices, see 5 types of files you should never keep unencrypted.
Keep the Scan in Vaultine
Vaultine is an encrypted vault for iPhone, Android, Mac and Windows. Import your passport scan into a vault, and it's encrypted on your device and opens only with the vault's own PIN or pattern, separate from your phone's passcode. Then delete the original from your photos. The free version holds 10 files, enough for a passport, an ID card and a driver's license, front and back. Set up your recovery phrase when you create the vault, so a forgotten PIN doesn't lock you out of your own documents.
