Storing a passport scan on your phone is convenient. But is it safe? The honest answer is: it depends entirely on where and how you store it.
The risks of storing a passport photo in the wrong place
Photos saved in your camera roll or a generic cloud drive are often:
- Readable by the service provider - unless the service explicitly offers end-to-end encryption, the provider holds the keys and can access your files
- Accessible if your account is compromised - a single leaked password can expose everything in an unencrypted cloud account
- Indexed by AI features - many photo apps now use your image library to train models or power search features, which means your passport may be analyzed by automated systems
None of these things are necessarily malicious, but they mean your passport image isn’t truly private.
What end-to-end encryption actually means
End-to-end encryption (E2EE) means your data is encrypted on your device using a key that only you hold. By the time your file reaches any server, it’s already encrypted - the server (and the company running it) sees only encrypted bytes, not your document.
For E2EE to be genuine:
- Encryption must happen on your device, before the file is uploaded
- The encryption key must be derived from something only you know (typically your password or biometric)
- The service provider must not have access to your key
This is fundamentally different from “encryption in transit” (which just means the connection is secure) or “encrypted at rest” (which means the provider holds the encryption keys, not you).
What to look for in a document storage app
Before trusting an app with your passport or ID, check:
- Does it use genuine E2EE? Look for explicit documentation, not just marketing language about “security”
- Is it open source? Open-source apps allow independent security researchers to verify the encryption claims
- What happens if you forget your password? If the company can recover your files, they have your keys - meaning it isn’t true E2EE
- Where are the servers? This affects which privacy laws apply to your data
The bottom line
Storing your passport on your phone is safe if you use an app with genuine end-to-end encryption and a strong, unique password. It is not safe to store it in a standard photo app, email, or unencrypted cloud storage.
Dokudok encrypts all documents on your device using E2EE before they ever leave it. We cannot read your files, and neither can anyone else who doesn’t have your password.