The direct answer
Shoot with the Kryptis private camera with face blur on when a face should never exist unblurred. Import documents and recordings into the vault and delete the originals. Keep an encrypted backup with the extra lock somewhere other than the phone. Set up the Decoy Vault and Self-Destruct Mode before you need them, and turn Face ID off for the vault.
This is not legal advice. Source protection law, shield laws and what can be compelled at a border differ by country. Your newsroom's legal team or a press freedom organisation can tell you what applies where you work.
Where source material leaks by default
- Photos: iCloud Photos, backups, the People album, Memories, widgets, and any device on your Apple Account.
- Files: iCloud Drive and Spotlight.
- Voice Memos: iCloud sync.
- The phone passcode: it opens all of the above, and Face ID can be presented to a face.
What to do now
- Turn on face blur in the private camera when photographing a person who must not be identifiable. The blurred frame is the only one that exists.
- Import documents, screenshots and recordings into the vault. Kryptis stores files, not only photos.
- Delete the originals from Photos, Files and Voice Memos, then Recently Deleted.
- Create an encrypted backup with the extra lock and keep it off the phone. Give the recovery words to no one; store them apart from the backup.
- Set up the Decoy Vault with plausible working material.
- Set up Self-Destruct Mode and know the passcode cold.
- Keep Face ID unlock off for Kryptis, and set Auto-Lock short.
Metadata
Photos carry location and device metadata. The vault encrypts the file, metadata included, but a copy you share out carries whatever the original had. Strip location before sending anything on.
What not to rely on
Hidden album, locked notes, a disguised icon, or deleting at the desk. See what a border search exposes.
What Kryptis does not solve
Compelled disclosure, the law where you are, and the security of whoever you send material to. A vault protects the copy on your phone.
