How to protect your data before an iPhone repair

A broken screen or a tired battery shouldn't mean a stranger can scroll through your photos. Here's what to do before you hand your iPhone over, what to say if the shop asks for your passcode, and what to check when you get it back.

Updated

Short version. Back up and confirm the backup finished. Prepare Find My the way your iOS version requires. Remove Wallet cards. Move private photos and documents into something with its own encryption key, then empty Recently Deleted. Apple says it will never ask for your passcode; if any shop does, ask why and unlock the phone yourself while you watch.

Why a repair is a privacy moment

For most repairs, your phone leaves your hands for hours or days. Whoever holds it can see anything that isn't behind a second lock, and if they also have your passcode, very little is behind a second lock: apps you lock with Face ID still open with that same code, and so does everything that was never locked in the first place.

Apple's own service guide is clear on this point: Apple and Apple Authorised Service Providers won't ask for your device passcode or Apple Account password. For some software issues you may be asked to type them in yourself, and Apple recommends staying with the device while a technician has access. Independent repair shops don't all follow the same rules, so the steps below assume the phone could be looked at.

Step 1: Back up, and check that it actually finished

Some repairs end with the phone being erased or replaced. A backup is what makes that a non-event.

  1. Back up to iCloud or to a computer.
  2. Open Settings, tap your name, then iCloud, and check that the status next to Saved to iCloud shows the green icon.
  3. Check that the apps that keep their own backups are up to date too. In Hushkeeper, for example, the Encrypted backup setting should be on and show "Up to date".

Make sure you also have whatever you need to restore those apps on a fresh phone: your Apple Account password, and for an encrypted vault, its recovery phrase. Write it down somewhere that isn't the phone you're about to hand over.

Step 2: Prepare Find My for your iOS version

Apple's steps depend on which version you run:

  • iOS 27 or later: open the Find My app, select your iPhone, tap the More button, tap Repair or Trade In, then Enable.
  • iOS 26 or earlier: open Settings, tap your name, then Find My → Find My iPhone, and turn it off.
  • Phone won't cooperate? Use the Find My app on another Apple device or icloud.com/find, select the iPhone and choose the repair or remove option there.

Step 3: Clear out Wallet and check the repair status

  1. Turn off Apple Cash in Settings → Wallet & Apple Pay, if you use it.
  2. In the Wallet app, open each card or pass, tap More → Card Details (or Pass Details) and remove it.
  3. Look at your Parts and Service History. Apple notes that if a part shows Finish Repair, you should complete that first, or the repair of that part may cost more or be refused.

Step 4: Move the truly private files somewhere with its own key

This is the step most checklists skip. Think about what in your camera roll and Files app you would not want a stranger to see: ID and passport scans, medical letters, contracts, screenshots of bank details, personal photos. Those need a lock that is not your passcode.

  1. Choose where they'll live: a locked note with a separate Notes password, or an encrypted vault app. Our guide on how to hide photos on iPhone compares the options, and this checklist helps you tell a real vault from a disguised folder.
  2. Import the files and check they open in their new home.
  3. Delete the originals from Photos and Files.
  4. Open Recently Deleted in Photos and delete them there as well. Apple keeps deleted photos there for 30 days, and that album is exactly where a curious person would look.

One warning: with iCloud Photos on, deleting a photo on your iPhone deletes it on your other devices too. Confirm the vault copy exists and is backed up before you empty anything.

In Hushkeeper, files are encrypted on the device with AES-256-GCM and the vault opens with a pattern that is separate from your iPhone passcode, so a technician who knows the passcode still sees only the unlock screen. Every pattern opens its own vault and the app never lists them, so there's no menu that reveals how many exist. If you'd rather the app itself not stand out, Pro can change its icon to Calculator, Notes, Weather or Clock.

Step 5: Lock or sign out of sensitive apps

iPhone lets you lock individual apps: touch and hold the app icon, tap Require Face ID (or Touch ID or Passcode) and confirm. That's useful, but know its limit: a locked app still opens with your device passcode. Some built-in apps, including Settings, Camera, Contacts and Maps, can't be locked at all.

So if there's any chance the shop will have your passcode, sign out of the apps that matter most for the duration: email, banking, messaging on other devices, password managers, and social accounts. Signing back in afterwards takes a few minutes; undoing a leak doesn't.

If the shop asks for your passcode

Ask what they need it for. Common, legitimate answers are "to test the new screen" or "to check that Face ID works after the repair". In those cases you can usually offer one of these instead:

  • Unlock it yourself at the counter and stay while they run the test.
  • Wait in the shop for short repairs like a battery swap.
  • Use a temporary passcode. Change it to a code you've never used before, hand that over, and change it back as soon as the phone returns. Never reuse a code from your bank card or another device.

If a shop insists on keeping the phone unlocked for days, that's your signal to finish Step 4 and Step 5 first, or to consider an authorised provider.

What a technician with your passcode can and can't see

Where the file isVisible with your passcode?
Camera rollYes
Hidden album and Recently DeletedLocked with Face ID or Touch ID by default, but the lock is a setting in Settings → Apps → Photos
Apps locked with Require Face IDYes, the passcode opens them
Apps you signed out ofNo
Locked note with a separate Notes passwordNo, needs that password
Encrypted vault with its own keyNo, needs the vault's own key

When you get the phone back

  1. Check whether it was erased. If it was, restore from your backup. Apple advises that if you set it up as new and later want your old data, you erase it and restore from the older backup as soon as possible, before new backups replace it.
  2. Turn Find My back on if you turned it off.
  3. Change your passcode if you shared it, even temporarily.
  4. Re-add Wallet cards and sign back in to the apps you signed out of.
  5. Restore your vault if needed. For Hushkeeper on an erased or replacement phone: sign in to the same iCloud account, open Hushkeeper, tap Use recovery phrase and enter your phrase.

What none of this protects against

A second lock only helps while it's closed. Don't open your vault in front of the technician, and don't hand over a phone with the vault unlocked. Software on a tampered or jailbroken device can see whatever you open on it later, so if a repair left you uneasy, have the phone checked or erased and restored from your backup. And if you share photos with someone else, the vault can't stop them taking a screenshot.

Sources

Keep reading