How to share photos securely without leaking your location or privacy
Written for anyone sending personal photos, document scans or source pictures who wants both transit encryption and clean file headers
Short answer
Sharing a photo securely requires two steps that most people mix together: cleaning what is hidden inside the file itself (EXIF GPS coordinates, capture timestamps, device serials and bystander faces), and choosing an encrypted transport channel (such as Signal, iMessage, AirDrop or a password-locked PDF) so servers in the middle cannot read it. Even end-to-end encrypted messaging apps deliver your home GPS coordinates to the recipient if you send a raw photo without cleaning its metadata first.
On this page
When people ask how to “share photos securely”, they usually focus only on the pipe, whether to use iMessage, Signal, AirDrop, email or a cloud link.
In practice, more privacy leaks happen inside the file itself than in transit: sending a photo over an encrypted chat app still hands the recipient your exact home GPS latitude and longitude, your iPhone model, the timestamp when the photo was taken, or a reflection/badge in the background of the frame.
Step 1 vs Step 2: File hygiene + Transport encryption
Comparing the 5 common ways people share photos
| Sharing channel | Encrypted in transit / end-to-end? | Strips EXIF & GPS automatically? | Watch out for |
|---|---|---|---|
| Signal (Standard photo) | Yes (end-to-end encrypted) | Yes (strips EXIF on standard image sends) | Recipient can still save the image unless you trust them. |
| Apple iMessage | Yes (end-to-end encrypted; also in iCloud if ADP is on) | No! Keeps GPS unless you tap Options > Location Off | Photos sent in iMessage appear in the recipient’s Shared with You feed inside Apple Photos by default. |
| WhatsApp / Telegram | WhatsApp: E2EE by default; Telegram: Only in Secret Chats | Standard photo: Yes. “Send as File / Document”: No! | Regular Telegram cloud chats are not end-to-end encrypted, and “Send as File” keeps full GPS tags. |
| Apple AirDrop | Yes (local peer-to-peer TLS over Wi-Fi Direct) | No! Keeps GPS unless Options > Location Off is set | Only works when both Apple devices are within a few metres of each other. |
| Email attachment (Gmail / Outlook) | TLS in transit only; stored readable on mail servers | No! Keeps every EXIF, GPS and camera tag | Never attach unencrypted sensitive photos to standard email; lock them inside an encrypted PDF or ZIP first. |
The 4-step checklist before you send a sensitive photo
Run through these four steps in under a minute before sending a private photo, ID scan or workplace picture:
- Crop tightly around the subject in the in-browser image cropper so computer screens, mail envelopes, street signs and room reflections at the edges of the frame are removed completely without leaving an EXIF preview thumbnail.
- If the image contains children’s faces, bystanders, number plates or document account numbers, cover them in the face blur tool using a Solid block for text/numbers or strong Pixelate for faces.
- Drop the photo into the photo metadata remover and click Save clean copy so all EXIF, GPS coordinates, camera serial numbers, timestamps and C2PA blocks are spliced out of the file.
- Send the cleaned copy over an end-to-end encrypted channel (such as Signal or iMessage), or if you must use email, lock the image inside a password-protected PDF with a 12+ character passphrase and send the password over a separate message channel.
For a deeper look at protecting a source who sends you photos, read our scenario guide on handling journalist source photos.
Questions
Does sending a photo over iMessage or WhatsApp strip GPS location data?
iMessage keeps the original EXIF GPS coordinates intact unless you manually tap Options > Location Off in the iPhone Share Sheet before sharing. Standard WhatsApp photo messages strip EXIF, while sending a photo 'as a Document' in WhatsApp or Telegram passes the untouched GPS coordinates through.
Does AirDrop send my photo’s location and metadata?
By default, AirDrop between two iPhones shares the photo without edit history unless you tap Options > All Photos Data, though standard EXIF location tags still travel unless you switch Location off under Options at the top of the Share Sheet.
What is the safest app for sending a private photo to one person?
Signal is widely preferred for single-recipient photo sharing because it is end-to-end encrypted by default, strips EXIF metadata from standard image attachments automatically, and supports view-once / disappearing media.
How do I send a photo by email when the email server is not end-to-end encrypted?
Clean the photo’s metadata first, then place the image inside a password-protected PDF (using the built-in iPhone Files / Print-to-PDF lock or macOS Preview) with a 12+ character passphrase, and send the passphrase to the recipient via SMS or Signal.
Can someone still recover a photo after I send it as 'View Once'?
Yes. While View Once stops casual saving inside the app, the recipient can always photograph their screen with a second phone or tablet. Never send a photo to someone you do not trust with a permanent copy.
Keep reading
How to remove location from your photos
Turn off Location in the share sheet, stop the Camera recording where you are, and clean files before you email them.
GuideHow to password-protect a PDF on iPhone
Lock any PDF on your iPhone in thirty seconds using the built-in Files app or Print sheet, with no app to install and no subscription.
SituationProtecting a source who sends you photos
A photo can reveal where and when it was taken and on which phone. Don’t rely on the app to strip that; clean files yourself.
