How to Find and Take Back Photos You've Shared

Check four places: Shared Albums, which never expire, iCloud links, which expire after 30 days, any Shared Library, and your message threads. You can revoke all of them in about fifteen minutes. What you can’t do is retrieve a photo someone already saved, so treat revoking as closing a door rather than undoing the share.

The short answer

Most people have shared far more than they remember. An album made for a wedding, a link sent to a colleague, a holiday library shared with a partner you’re no longer with.

None of it announces itself. There’s no notification saying nine people can still see the album you made four years ago, and Apple deliberately doesn’t nag you about it. So the sharing accumulates quietly and stays live until someone goes looking.

The good news is that the audit is quick and you only need to do it properly once, then occasionally after that. The bad news, worth saying up front, is that it recovers access rather than photos.

The four channels, and how they differ

They behave differently enough that treating them the same is how things get missed.

Channel	Expires	Who can save	Where to check
Shared Album	Never	Any subscriber	Photos, Shared Albums list
iCloud Link	After 30 days	Anyone with the link	Photos, recently shared
Shared Library	Never, until you leave it	Every participant	Photos settings
Messages thread	Never	The recipient	The conversation itself

The first row is the one that surprises people. A Shared Album has no expiry, no reminder and no limit on how long it sits there. It’s a standing invitation, and the subscriber list is whoever you added at the time, which for a big event might be people you barely know now.

The second row is the reassuring one. iCloud links time out on their own after 30 days, so a link you sent last spring is already dead without you doing anything.

Shared Albums, the ones that never end

Start here, because this channel holds the most and forgets the least.

Open Photos and find the Shared Albums section. Apple has moved this around between iOS versions, so if it isn’t where you expect, look in the albums list or search the app’s own settings. You’ll usually find more albums than you remembered creating.

For each one, open the people list. You’ll see who’s subscribed and whether the album is set to allow subscribers to post. Removing a subscriber cuts their access immediately. Deleting the album cuts everyone’s at once.

Two settings on each album deserve a look while you’re there. A public website option makes the album viewable by anyone with the address, without an Apple account at all. And subscriber posting lets other people add photos to something with your name on it.

Work through the list and ask one question per album: would I create this share today? If not, delete it. Nostalgia is not a security model, and an album nobody has opened in three years is pure exposure with no benefit.

When the album isn’t yours

One case doesn’t fit that pattern, and it’s the one people get stuck on.

If you’re a subscriber to someone else’s shared album, you have no control over it. You can’t remove other subscribers, you can’t change its settings, and you certainly can’t delete it. What you can do is leave, which takes it out of your Photos app and stops the content reaching you.

The harder version is an album that contains photos of you, owned by someone else. Leaving stops you seeing it. It does nothing about the album continuing to exist for everyone else, and there’s no technical fix for that, because it’s a conversation rather than a setting. Better to be clear-eyed about it than to hunt for a toggle that was never going to exist.

iCloud links and the 30-day clock

Links are the low-anxiety channel, since they clean themselves up.

When you share photos as a link rather than into an album, that link expires automatically after 30 days. You can also end it early from the list of things you’ve recently shared inside Photos, where each entry has a stop-sharing option.

Two caveats keep this from being fully self-solving. A link is open to anyone who has it while it’s alive, so if it was forwarded, it’s forwarded. And people re-share links by creating new ones, which restarts the clock, so a long email thread may contain several links at different ages.

If you’re sharing something sensitive and want it to close faster than a month, send it a different way. We went through the better options in how to send private photos safely.

The Shared Library, and other people’s copies

A Shared Photo Library is a different animal from a Shared Album, and mixing them up causes real confusion.

An album is a selection you pushed out. A shared library is a pooled collection where participants contribute and everyone sees the whole thing. Photos can move into it automatically, based on rules you set when it was created, which is where the surprises come from. People join one with a partner, forget the automatic rules, and later find that a category of photos has been flowing into shared space for months.

Check whether one exists in the Photos settings. If it does, look at what the automatic inclusion rules are before anything else, because that governs what keeps arriving. Leaving a shared library is possible, and you’re offered a choice about what to take with you.

Family Sharing deserves a glance in the same pass. It doesn’t share your photo library by default, which is a common misconception, but it does share other things and it’s worth knowing exactly what’s in the pool.

Messages is the untidy one

Every photo you’ve ever sent someone is still in that conversation, on both phones, for as long as either of you keeps the thread.

There’s no revoke here. You can delete your copy of a message, and on recent iOS versions you can unsend within a short window after sending, but a message from last year is simply part of that person’s message history. If they’ve had the phone a while, it’s also in their backups.

This is the channel where prevention is the only real control. The audit still earns its place, though not to revoke anything. It shows you the shape of what you’ve sent, which tends to be more than people expect, and that shapes how you send things later.

Messages also runs in the opposite direction, and that half catches people out. Shared with You surfaces photos other people sent you inside your own Photos app, mixing their content into your library. So the picture a friend sent as a joke can appear while you’re scrolling to show someone a receipt, and it will look, to anyone watching over your shoulder, exactly like one of your own. You can turn the feature off per app in Settings, or use the option to pin or unpin specific content. Either way, remember that not everything in your library got there because you took it or saved it.

What revoking actually does

Set expectations properly, because this is the point at which a settings guide either stays honest or quietly overpromises.

• It stops future access. The album won’t open, the link is dead, the library no longer syncs to them. That’s real and it’s worth doing.
• It doesn’t recall downloads. Anything a subscriber saved into their own library is theirs. iOS makes saving a shared photo a one-tap action, so assume at least one person did it.
• It doesn’t touch their backups. A saved photo is in their iCloud or computer backup like any other.
• It doesn’t erase screenshots. Nothing detects or prevents those.
• It doesn’t reach forwards. If a link was passed on before you closed it, you’ve closed your copy of that door and not theirs.

None of that makes the audit pointless. Closing nine live albums genuinely reduces what’s reachable, and most of those subscribers never saved anything. It just means the honest framing is that you’re reducing ongoing exposure, not undoing history.

The fifteen-minute audit, in order

Do it in this sequence, because each step narrows what the next one has to cover.

1. Shared Albums. Open each one, review the subscriber list, delete anything you wouldn’t create today.
2. Public website links. On any album you keep, check whether the public option is on, and turn it off unless you need it.
3. Recently shared links. Stop sharing anything still live that you don’t want live.
4. Shared Library. Check whether one exists and what its automatic rules are.
5. Message threads with people you’re no longer close to. Not to revoke, but to know.
6. Third-party apps. Anything with full photo library access has had the run of the place, so trim that list too.
7. Set a reminder for six months. This accumulates again, quietly, exactly like it did the first time.

Step six matters more than its position suggests, and it pairs with the cleanup in how to permanently delete photos from your iPhone — deleting an original is only final once nothing else holds a copy.

Where Arca fits

Everything above is about photos you chose to send. The other half of the problem is the photos you never intended to share at all, which sit in a camera roll that’s one swipe away from anyone holding your unlocked phone.

That’s the half Arca handles. Photos you move in are encrypted individually with AES-256-GCM, with the key derived from your PIN using Argon2id, a deliberately slow function that makes guessing that PIN expensive rather than instant. Everything stays in the app’s container on your device, with no server and no account, so there’s no shared copy anywhere and nothing for us to hand over. If you might ever be pressured to unlock, there’s a decoy vault. The full model is on our security page.

The limits, plainly. A vault protects what you actually move into it, not what’s still in the camera roll, and certainly not a photo you shared three years ago. It protects at rest, not while it’s open in front of someone. And with no server, we can’t recover anything if you forget your PIN.

Do the audit this week. Then remember its real lesson, which is that the only share you fully control is the one you haven’t made yet.

Get Arca on the App Store to keep your private photos encrypted with AES-256-GCM on your device, with no server in the loop.