A screenshot can become a backup you never intended.

Classify before deleting

Recovery codes, recovery keys, and seed phrases are not interchangeable.

A backup code may be a one-time route into a single account. A recovery key may be required to regain a particular account. A seed phrase or secret recovery phrase may control an entire self-custody wallet. Identify the issuer and verify another valid recovery path before deleting the only copy.

Apple specifically says not to store its 28-character recovery key in Apple Passwords, iCloud Photos, Notes, or iCloud Drive because those services may be inaccessible when the key is needed. Follow the current storage instructions from the service that issued the material rather than moving it to another convenient cloud copy.

Search Photos when you remember the context.

1. Open Photos, choose Search, and try the provider name, account address, or terms such as recovery, backup, wallet, seed, or phrase.
2. Repeat the search inside the Screenshots collection to narrow the set.
3. Open likely matches and inspect the whole frame. The secret may sit beside a QR code, account name, or setup instructions.
4. Try terms in another language if the source app was not using English.

Photos search depends on recognized text and the query you choose. Small, blurred, stylized, or split text can be missed, while an ordinary word list can resemble a seed phrase. Search results do not prove that a secret is genuine.

Use pattern review when you do not remember exact words.

SecretScan uses Apple's on-device text recognition and deterministic checks to surface possible recovery material for your review. It does not upload photos or recognized text to SecretScan servers and does not ask you to paste a code or phrase into a web form. False positives and missed content are possible, so treat the scan as a filter rather than a guarantee.

Respond according to the type of secret.

1. Identify the issuer through a trusted route. Do not follow links or instructions shown in a suspicious screenshot.
2. Verify the recovery plan. Use the provider's official documentation to store, replace, or regenerate codes. Never test a seed phrase on an unfamiliar website.
3. Treat a seed phrase as wallet control. MetaMask explains that whoever has its secret recovery phrase controls the derived accounts and that support should never ask for it. If exposure is possible, use the wallet provider's official compromised-wallet process; deleting the photo cannot revoke a copy someone already made.
4. Delete only the obsolete image. With iCloud Photos enabled, Apple synchronizes deletion across devices on the same Apple Account. The item remains in Recently Deleted for 30 days unless permanently removed sooner.

If the image was already shared

Start with the system protected by the secret. Regenerate or revoke account codes when the provider allows it. For a wallet, use only the product's official guidance and a clean device if instructed. Then review messages, tickets, shared albums, and backups you control. Deleting the local image does not remove other people's copies.