Decide what you actually need

Many situations need only a specific field, expiry date, or low-resolution reference—not a full-color scan of every page. Ask the recipient or process what is required and whether an official digital credential is accepted. Avoid storing extra signatures, machine-readable zones, addresses, or supporting documents without a purpose.

Do not alter a document submitted to an authority unless its rules explicitly permit redaction. For informal verification, a clearly marked copy with unnecessary fields covered may reduce reuse risk, but it may also be rejected.

Understand where scans appear

Depending on the capture method, a document may land in Photos, Files, Notes, iCloud Drive, a scanner app, email, a browser download folder, or a provider account. The app may create thumbnails, OCR text, recent-item entries, or temporary exports.

Before scanning, identify the destination and its synchronization settings. A lock on one note or app does not automatically protect copies already saved elsewhere.

A safer capture workflow

  1. Use a trusted, updated device in a private physical space.
  2. Prefer an app that saves directly into the intended protected destination.
  3. Capture only the pages and resolution required.
  4. Verify the encrypted copy is legible and complete.
  5. Lock and reopen the vault to confirm it can decrypt.
  6. Establish backup and recovery before removing an irreplaceable source copy.
  7. Review Photos, Files, Notes, scanner history, Recently Deleted, and cloud sync for unnecessary working copies.

Deletion removes an active copy but does not prove physical erasure from flash, prior backups, or provider retention.

Protect the encrypted copy

Use an uncommon vault pattern, short automatic-lock interval, and a recovery secret stored offline. Do not keep the recovery phrase in a screenshot beside the documents it unlocks. Avoid opening the document in public, during screen sharing, or while untrusted recording or remote-management software is active.

NullVault's encrypted photos, videos, files and notes feature is intended for app-managed documents and associated metadata. Review the security limitations before using any consumer app for a high-risk identity or legal situation.

Share the minimum necessary copy

An export leaves the vault boundary. Before sending:

  • verify the recipient and exact address;
  • use the recipient's official secure channel;
  • remove location metadata and unnecessary pages;
  • consider a recipient-specific watermark when permitted;
  • record why and when it was sent;
  • remove unnecessary export and download copies afterward.

Password-protected PDFs can add a layer, but sending the file and password through the same compromised channel weakens that protection. A recipient can also keep a decrypted copy.

Plan for travel and emergencies

An offline copy can help when connectivity fails, but border searches, compelled unlock, theft, device damage, and local law change the risk. NullVault is not legal advice and does not guarantee concealment of the app or encrypted storage. For sensitive travel, consult current official requirements and qualified legal or security guidance.

Review periodically

Delete expired documents when no longer needed, update changed expiry dates, test recovery, and inspect old exports. A forgotten scan can remain useful to an attacker long after it stops being useful to you.

Continue with who can see your encrypted photos for the same lifecycle model applied to protected media.

Guide reviewed: 23 August 2026.