← Back to blog

Why Screenshots Are a Terrible Way to Share Sensitive Text

2026-07-29 · 6 min read

There is a universal reflex when we want to send someone a password, a verification code, or an important address: we take a screenshot. We feel it is “more secure” because it is an image — you cannot just select and copy it like text. In practice, that instinct is exactly backwards. Screenshots are one of the worst ways to share sensitive information.

Why it feels safer

The intuition behind the reflex: text can be instantly copy-pasted, images cannot. If I send “the password is X”, you are one Ctrl+C from having it on your clipboard. If I send a screenshot with the password, “you have to type it by hand”.

That difference is real in terms of copy convenience. But in terms of exposure, screenshots are worse. The reason is that the image behaves like an object that travels through systems, and those systems do things to it that text would not suffer.

Three problems almost nobody considers

1. OCR turns your image into searchable text

Modern photo services (iCloud, Google Photos, OneDrive) automatically recognize text inside images. A screenshot reading “My password: ABC123” is indexed and searchable as if it were plain text. If you search “password” in your photo library, it appears. If anyone with access to your account searches for it, it appears. Your screenshot is not a black box — it is text in disguise.

2. It uploads to the cloud without you noticing

By default, almost every modern phone uploads your screenshots to the cloud. iCloud Photos, Google Photos, OneDrive Photos. This happens silently in the background. That password you screenshotted is now on at least two servers: yours and the cloud provider\'s. If the cloud leaks (which has happened to several providers), your screenshot is in the leak.

3. Images get forwarded with one tap

The social problem: once you sent the screenshot, you lost control. The recipient can forward it without thinking to a group, another contact, someone who asks them. Images circulate with less friction than text: nobody reviews the contents before forwarding a photo. Your password in a screenshot can end up in five chats you know nothing about.

The worst part: previews

Almost every chat app shows image previews in the chat list. That tiny thumbnail can be sharp enough that your password is readable without even opening the chat. Anyone glancing at the recipient\'s phone over their shoulder — a coworker, someone next to them on the bus, a spouse — sees the information without having to actively do anything.

The “I will delete it later” myth

Many people think screenshots are temporary: “I will send it, then delete it”. In practice, almost no one deletes them afterwards. Even if you delete yours, the cloud copies survive. Even if you clean the cloud, the recipient also has it. Deleting it from your phone is not deleting it from the world — it is only deleting it from your view.

Alternatives that actually work

For sharing sensitive text, the reasonable options all work the opposite way to screenshots: instead of making the information travel as an image, you keep the information on a controlled server and share only a link to it.

  • Password-protected note. The information lives on a server you can edit and delete. What travels is a link, not the content. Password protection ensures only the intended reader sees it.
  • One-time secret. For initial passwords the recipient will use once and forget.
  • Voice directly. If the information is very short, saying it on the phone (not via voice chat) is probably safer than any digital alternative.
  • In person. If the person is in front of you, showing them your phone screen to read — but do not send it by chat.

When a screenshot is fine

Screenshots have their place. For showing an error, a conversation, the visual state of something — they are the perfect tool. The problem is not the screenshot itself, it is using it to substitute a text message that would carry sensitive information. For visual evidence: screenshots. For delivering credentials or confidential data: anything else before an image.

Conclusion

The intuition that screenshots are “safer” than text is exactly backwards. OCR makes them as searchable as text. Cloud sync multiplies them without your permission. Their image nature makes them easy to forward and preview. For any sensitive information — passwords, codes, personal data, addresses — a password-protected note is categorically better than a screenshot. Changing the reflex takes a week of conscious practice and eliminates years of accumulated exposure.