Guides / Pictures of passwords and Wi-Fi

Pictures of passwords and Wi-Fi details

Short answerIt's better to keep passwords in a password manager, such as the Passwords app on your iPhone, than in a picture. A picture is easy to find, easy to share and easy to forget. If one has been seen, change that password. It's a small job, and nothing here is cause for alarm.

Why people do it

A screenshot is quick. You're at a friend's, you need the Wi-Fi code, so you snap the router label. Or you photograph a page of logins "just in case". It works, until the picture is somewhere you didn't mean it to be.

Why it's risky

The UK's National Cyber Security Centre says that if you reuse a password and one account is compromised, a hacker can try the same password on your other accounts. It says the first and most important step is to turn on two-step verification.

Where to keep them instead

Please don't put a password in Apple's Notes app or a message to yourself. A password manager is built for this, and a note isn't.

If a picture was already seen

  1. Change the password. The FTC says to create a new strong password, and to change it anywhere else you used it. Then turn on two-factor authentication.
  2. For Wi-Fi, change the password in your router's settings if you shared it with someone you no longer trust. Your router's manual or provider can show how.
  3. Delete the picture. Deleted photos stay in Recently Deleted for 30 days, and with iCloud Photos on, deleting applies to all your devices. Empty Recently Deleted to remove it sooner.
  4. Check chats. If you sent the picture to anyone, their copy stays with them.

Changing a password is what makes an old picture useless. Deleting the picture alone doesn't. That's our advice.

How FirstHour helps

This is a place where FirstHour has limits, so here is the plain version. It doesn't look for account passwords in your pictures. A screenshot of a login page, or a photo of a page of passwords, isn't something it finds.

For Wi-Fi, Protect finds Wi-Fi QR codes that have the network's password inside, and shows them under Wi-Fi passwords. A picture of a router label or a typed-out code isn't found. It also finds QR codes that set up an authenticator app, and shows those with backup codes. Pictures stay blurred until you're ready, you can move any to the Vault, and nothing is uploaded.

It can miss handwriting and blurry pictures, and it doesn't check videos or your Hidden album. FirstHour can't change a password for you. Only the account can do that.

Questions

Can I keep the picture in the Vault?

That's safer than your camera roll, because the Vault opens with its own pattern or PIN, separate from your iPhone passcode. A password manager is still the better home for a password, because it can fill it in and warn you if it's weak.

Is a Wi-Fi password as important as an account password?

It matters less than your email or bank password, but anyone who has it can join your network. Change it if you've shared it widely.

What about codes from text messages?

See old one-time codes in screenshots.

Sources

All guides