Is Email Safe for Sharing Photos?

The Myth: Email Is Private

Most people treat email like a sealed envelope. You attach some photos, type in a recipient, and hit send. It feels private. The photos go from your inbox to theirs. Nobody else sees them. Right?

Not quite. A message is stored by your provider, handed to the recipient's provider and stored again, and unless it is end-to-end encrypted, both providers can read it. Apple says so plainly about its own service: "iCloud Mail does not use end-to-end encryption because of the need to interoperate with the global email system."

Is email safe for sharing photos? For a casual snapshot of your lunch that you're sending to a friend - sure. For family photos, private moments, medical images, or anything you wouldn't want a stranger to see - no. Here's what happens to your photos when you hit send.

What Actually Happens to Photo Attachments

When you attach a photo to an email, it doesn't travel in a sealed envelope from your computer to the recipient's. It is copied from server to server, and each copy is stored by whoever runs that server.

• Step 1: Your email client uploads the photo to your email provider's outgoing mail server (SMTP). The photo is now stored on your provider's servers.
• Step 2: Your provider routes the email through one or more relay servers to reach the recipient's provider. Each relay server handles the full email including attachments.
• Step 3: The recipient's provider stores the email with the attached photo on their servers, where it stays until someone deletes it.
• Step 4: Copies persist. Your sent folder keeps a copy. The recipient's inbox keeps a copy. Deleting the email from your inbox doesn't delete it from the recipient's inbox.

Encryption in transit protects the connection, not the stored copy. Proton, which encrypts mail end to end between its own addresses, describes what happens when you write to anyone else: messages travel "encrypted with TLS", and "Once the email reaches your recipient, it isn't end-to-end encrypted by default. So the recipient's email provider may be able to access it."

What Email Providers Say They Do With Your Photos

On 26 October 2026 we read the privacy policy and help pages of five email providers and recorded, for each property below, the sentence on the provider's own page that answers it. "Not stated" means those pages say nothing either way; it is not a claim that the provider does not do it. The quotes and links are in the dataset.

Four of the five say they scan or analyse the content they hold. Google writes that it analyses "your content to help us detect abuse such as spam, malware, and illegal content", and that turning on smart features in Gmail lets Gmail use your content to personalise the app. Microsoft names hash matching "to help prevent child exploitation" and says it does not use your emails, photos or documents to target ads, but also that it "may use your data to develop, train, and fine-tune our AI models". Yahoo analyses "email content, posts photos, attachments", and uses email content for ad profiles only from retailers and other organisations, not personal emails between individuals.

Proton is the exception: it says it does "not have the technical means to access the content of your encrypted emails". That protection ends at its own border, though. A photo you send from Proton to a Gmail address is stored by Google like any other message.

EXIF Metadata Travels With Every Attachment

An attachment is the file itself, base64-encoded into the message and decoded back on the other side. Whatever EXIF metadata the file carries goes with it:

• GPS coordinates - the latitude and longitude where the photo was taken
• Timestamps - when the photo was taken, down to the second
• Device information - your phone model and operating system version
• Camera settings - aperture, shutter speed, ISO, focal length
• Software edits - which apps modified the photo and when

We checked this on a test photo: a 3024 x 4032 JPEG made from a NASA public-domain image, with a phone's EXIF written into it. Attached to a message with Python's standard email library and read back out, it came back byte for byte, still carrying GPS 28 35 9.6 N, 80 39 3.6 W and the camera model iPhone 15 Pro. Email a photo of your kids in the backyard, and the recipient can read where it was taken. The risks of photo location data are well-documented, but most people don't think about them when attaching photos to emails.

Viallo is a private photo sharing platform that stores photos in full resolution. It keeps each file as uploaded, so a recipient who downloads a photo from a Viallo link gets its EXIF data, location included. To remove it first, use the tool that strips EXIF data before sharing. Viallo's metadata editor changes the location the album shows, not the file a recipient downloads.

Emails Stay Until Someone Deletes Them

None of the five providers names a date when mail is deleted. Google says content you upload,"like photos and documents", is data you can delete whenever you like. Microsoft, Yahoo and Apple each say they keep personal data for as long as necessary to provide the service. Proton's privacy policy does not state a period. Photos you emailed years ago are still in your sent folder and the recipient's inbox unless one of you deleted them.

This creates two problems:

• Breach exposure. If your email account is compromised, every photo you've ever emailed is exposed. In March 2026, CNN reported that hackers connected to the Iranian government got into FBI Director Kash Patel's personal email and posted photos and documents taken from it.
• Legal discovery. In legal proceedings, emails and attachments are discoverable. Photos you emailed years ago could surface in a divorce proceeding, employment dispute, or lawsuit.

With link-based photo sharing, you can revoke access at any time. Delete the album or revoke the link, and the link stops working, though anyone who already downloaded a photo keeps that copy. With email, once you hit send, you've lost control over the copy you sent.

How Many Photos Fit in One Email?

For personal Gmail accounts, Google's help page says "the limit is 25 MB", and Yahoo allows 25MB of attachments per message. Above the limit, Gmail "automatically removes the attachment and adds it as a Google Drive link in the email". Base64 encoding makes each file bigger inside the message, so we measured three test files on 26 October 2026. Google does not say whether its limit counts the file or the encoded message, so both counts are shown.

By message size, three 12 MP photos is the most one email carries, and a single 19.9 MB original does not fit at all.

When Email Is Fine (and When It Isn't)

Email isn't always the wrong choice. For low-stakes sharing, the convenience of email is hard to beat. Here's a practical framework:

Email is fine for:

• Casual photos you'd post on social media anyway
• Screenshots or quick references (restaurant menus, directions)
• Work photos that aren't confidential
• One or two photos to a single known recipient

Use a dedicated sharing platform for:

• Family photos, especially of children
• Medical images or documentation
• Legal documents containing personal photos
• Private moments you wouldn't want in a data breach
• More than a few photos (Gmail's limit for personal accounts is 25 MB)
• Anything you might want to revoke access to later

If you're sharing photos that you'd be uncomfortable seeing in someone else's inbox due to a forwarded email or a compromised account, email is the wrong tool. Use a private sharing method instead.

Better Ways to Share Photos Privately

If email attachments are out, what should you use instead? The alternatives below share photos through a link rather than a copy in every recipient's inbox.

• Viallo - create an album, upload photos, share a private link with an unguessable 16-character address. Recipients view everything in a browser with lightbox, location grouping, and map view. No account needed, no app download, full resolution preserved. You can revoke the link at any time.
• Google Photos shared albums - a cross-platform option; every Google account comes with up to 15 GB. Google says link sharing uses "an unguessable URL that can be reset at any time", and that with Collaborate turned on, anyone who has the link can add photos.
• Signal - for one or two photos in a conversation. Signal says its messages "are always end-to-end encrypted", so Signal itself cannot read them. Not practical for albums or large batches.
• Other secure sharing methods - depending on your needs, options like encrypted file transfer services or self-hosted solutions may also work.

The core principle is simple: instead of copying photos into email attachments that stay in every inbox they reach, share a link to photos kept in one place. You decide who sees them, and you can revoke the link the moment you change your mind. With email, every recipient (and their email provider) gets a copy of its own.

Readers who want to stop emailing private photos can start with Viallo's free plan - 2 albums, 200 photos, 10 GB of storage.

How was this checked?

On 26 October 2026 we fetched the privacy and help pages of Gmail, Outlook, Yahoo Mail, iCloud Mail and Proton Mail with curl and recorded, for each property in the table, the value and the exact sentence on the provider's page that supports it. The same day we rebuilt three test photos from a NASA public-domain image with macOS sips and exiftool, attached each to a message with Python's email library, and measured the message size and what came back out. The results are in dataset.csv, and check.py re-reads every page and repeats the measurement.

Frequently Asked Questions