How to keep photos from Signal private on iPhone
Signal's iPhone help describes saving a photo as a step you take yourself; the moment you tap Save Image, the photo goes into your Photos library, where anyone with your passcode can reach it, and iCloud Photos too if it is on.
Where do Signal photos go on iPhone?
Into the chat. You can find all of a chat’s photos by tapping the contact’s name and choosing All Media. Signal’s help describes saving a photo to your iPhone as a step you take yourself.
Inside Signal, the photo is covered by Signal’s own protections: it is part of the conversation, and it goes away with the conversation if disappearing messages are on.
How do I save a photo from Signal?
Signal describes two ways on iPhone:
- Open the chat, tap the contact’s name, choose All Media, open the photo, tap the share icon, then Save Image (or Save Video).
- Or open the chat, press and hold the photo, tap the share icon, then Save Items.
Either way, the photo is copied into the iPhone Photos app.
What happens when I save a Signal photo?
Once it is in Photos, it is an ordinary photo. Signal’s protections no longer apply to that copy:
- Anyone who can unlock your iPhone can scroll to it.
- If iCloud Photos is on, it uploads to iCloud like any other photo, and appears on your other Apple devices.
- It can show up in Memories, search and the photo widget.
- Deleting the Signal message, or letting it disappear, does not delete the saved copy.
That is the gap most people miss: the chat was private, the saved photo is not.
How do I make Signal photos disappear?
Turn on disappearing messages, for one chat or for every new chat:
- One chat: open the chat settings, tap Disappearing messages, choose a time, then tap Set.
- Every new chat: in Signal, go to Settings > Privacy > Default timer for new chats.
You can choose a preset time or a custom time of up to 4 weeks. The setting applies to new messages after you set it. When the timer ends, Signal deletes the message from the device.
For a photo you send that should not be kept at all, use view once: when you attach the photo, tap the view-once icon before you send. Signal removes it after it has been opened, or after 45 days if it is never opened.
What these settings don’t protect against
Signal is clear about the limits. Disappearing messages are not meant for a contact who is your adversary: they can photograph the screen with another camera before the message disappears.
And none of it covers a photo after you save it. From that moment, it is protected by your iPhone passcode and by however you store your Photos library.
Where should I keep Signal photos I need to keep?
If a photo only matters for a few days, leave it in Signal with a disappearing timer. That is the safest place for it.
If you need to keep it, the question is who you are keeping it from. The Hidden album in Photos stops a glance, but anyone with your passcode can open it. A vault app keeps it behind a separate secret. Oorvel, for example, encrypts it on the phone under six words that are not your passcode, with no account and no cloud.
Whichever you use, finish the job: after you move the photo, delete it from Photos and empty Recently Deleted. Until then, the saved copy is still on your phone.
Frequently asked
- Does Signal save photos to my iPhone's camera roll?
- Signal's help page describes saving as something you do yourself, from the chat's All Media screen or by pressing and holding a photo and choosing Save Items. It does not describe any automatic saving to Photos on iPhone.
- Do disappearing messages delete photos I saved?
- No. Disappearing messages delete the message from Signal when the timer ends. A photo you already saved to Photos is a separate copy and stays there.
- How long can a Signal disappearing message timer be?
- You can pick one of Signal's preset times or a custom time of up to 4 weeks. For a message you receive, the timer starts after you read it.
- Can the other person keep a photo I send on Signal?
- Yes, in practice. Signal says disappearing messages are not for situations where the other person is your adversary, because they can photograph the screen with another camera.