iPhone backup database hashes: which filenames do they use?

Updated
Cover image for: iPhone backup database hashes: which filenames do they use?

When an iTunes or an iCloud backup is performed for your iPhone, iPad or iPod Touch, important data is saved into various files within the backup folder.

The filenames are encoded so they appear as strings of letters and numbers if you access the backup folder, using what is known as a hex-encoded SHA-1 hash. In many versions of the iPhone operating system the same names are used.

Here are some of the core SQLite database files found in the iTunes backup folder. The file names are the same for both iTunes and iCloud backups.

iOS 13, 12 and 11 iPhone backup file locations

Contents Real filename Backup filename
SMS sms.db 3d0d7e5fb2ce288813306e4d4636395e047a3d28
Contacts AddressBook.sqlitedb 31bb7ba8914766d4ba40d6dfb6113c8b614be442
Calendar Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Reminders Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Notes notes.sqlite ca3bc056d4da0bbf88b5fb3be254f3b7147e639c
Notes NoteStore.sqlite 4f98687d8ab0d6d1a371110e6b7300f6e465bef2
Call history call_history.db 2b2b0084a1bc3a5ac8c27afdf14afb42c61a19ca
Call history CallHistory.storedata 5a4935c78a5255723f707230a451d79c540d2741
Locations consolidated.db 4096c9ec676f2847dc283405900e284a7c815836
Web history History.db e74113c185fd8297e140cfcf9c99436c5cc06b57
Voicemail voicemail.db 992df473bbb9e132f4b3b6e4d33f72171e97bc7a
Photos Photos.sqlite 12b144c0bd44f2b3dffd9186d3f9c05b917cee25

iOS 10, 9, 8 and 7 iPhone backup file locations

Contents Real filename Backup filename
SMS sms.db 3d0d7e5fb2ce288813306e4d4636395e047a3d28
Contacts AddressBook.sqlitedb 31bb7ba8914766d4ba40d6dfb6113c8b614be442
Calendar Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Reminders Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Notes notes.sqlite ca3bc056d4da0bbf88b5fb3be254f3b7147e639c
Call history call_history.db 2b2b0084a1bc3a5ac8c27afdf14afb42c61a19ca
Call history CallHistory.storedata 5a4935c78a5255723f707230a451d79c540d2741
Locations consolidated.db 4096c9ec676f2847dc283405900e284a7c815836
Photos Line.sqlite 2d711a1f5613f5259730b98328a3f7e816698f88

The paths to the WhatsApp, Snapchat, Kik, Viber and WeChat databases are mentioned in the table below. These filenames are available for iOS 8 and 9 but have different names for the older versions of iOS.

Chat app Stored to Backup filename
WhatsApp App Domain/net.whatsapp.WhatsApp/, Documents/ChatStorage.sqlite 1b6b187a1b60b9ae8b720c79e2c67f472bab09c0, 275ee4a160b7a7d60825a46b0d3ff0dcdb2fbc9d, 7c7fba66680ef796b916b067077cc246adacf01d
Snapchat App Domains/com.toyopagroup.picaboo/, Documents/chats.plist (private messages) or stories.plist (public snaps) 1cd3cd2b412f7b045dd479b617cb2a4f99ffdfee, 7cdb9af6c5352b97cc0f87369df43c49a45c99f3
Kik App Domain/group.com.kik.chat/, cores/private/…/kik.sqlite 8e281be6657d4523710d96341b6f86ba89b56df7
Viber App Domain/com.viber/, Documents/Contacts.data b39bac0d347adfaf172527f97c3a5fa3df726a3a
WeChat App Domain/com.tencent.xin/, Documents/DB/MM.sqlite (Varies dynamically)
Line Photos.sqlite 12b144c0bd44f2b3dffd9186d3f9c05b917cee25

iOS 6 iPhone backup filenames

Contents Real filename Backup filename
SMS sms.db 3d0d7e5fb2ce288813306e4d4636395e047a3d28
Contacts AddressBook.sqlitedb 31bb7ba8914766d4ba40d6dfb6113c8b614be442
Calendar Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Reminders Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Notes notes.sqlite ca3bc056d4da0bbf88b5fb3be254f3b7147e639c
Call history call_history.db 2b2b0084a1bc3a5ac8c27afdf14afb42c61a19ca
Locations consolidated.db Removed from iTunes backup, not iOS

iOS 5 iPhone backup filenames

Contents Real filename Backup filename
SMS sms.db 3d0d7e5fb2ce288813306e4d4636395e047a3d28
Contacts AddressBook.sqlitedb 31bb7ba8914766d4ba40d6dfb6113c8b614be442
Calendar Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Reminders Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Notes notes.sqlite ca3bc056d4da0bbf88b5fb3be254f3b7147e639c
Call history call_history.db 2b2b0084a1bc3a5ac8c27afdf14afb42c61a19ca
Locations consolidated.db Removed from iTunes backup, not iOS

iOS 4 iPhone backups filenames

Contents Real filename Backup filename
SMS sms.db 3d0d7e5fb2ce288813306e4d4636395e047a3d28
Contacts AddressBook.sqlitedb 31bb7ba8914766d4ba40d6dfb6113c8b614be442
Calendar Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Notes notes.sqlite ca3bc056d4da0bbf88b5fb3be254f3b7147e639c
Call history call_history.db 2b2b0084a1bc3a5ac8c27afdf14afb42c61a19ca
Locations consolidated.db 4096c9ec676f2847dc283405900e284a7c815836

iOS 3 iPhone backup filenames

Contents Real filename Backup filename
SMS sms.db 3d0d7e5fb2ce288813306e4d4636395e047a3d28
Contacts AddressBook.sqlitedb 31bb7ba8914766d4ba40d6dfb6113c8b614be442
Calendar Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Notes notes.db 740b7eaf93d6ea5d305e88bb349c8e9643f48c3b
Call history call_history.db ff1324e6b949111b2fb449ecddb50c89c3699a78

iOS 2 iPhone backup filenames

Contents Real filename Backup filename
SMS sms.db 3d0d7e5fb2ce288813306e4d4636395e047a3d28
Contacts AddressBook.sqlitedb 31bb7ba8914766d4ba40d6dfb6113c8b614be442
Calendar Calendar.sqlitedb 2041457d5fe04d39d0ab481178355df6781e6858
Notes notes.db 740b7eaf93d6ea5d305e88bb349c8e9643f48c3b
Call history call_history.db ff1324e6b949111b2fb449ecddb50c89c3699a78

iOS 1 iPhone backup filenames

Contents Real filename Backup filename
SMS sms.db 3d0d7e5fb2ce288813306e4d4636395e047a3d28
Contacts AddressBook.sqlitedb adb8c77534444e97c31ff15924d50f3ed1fbd3b1
Calendar Calendar.sqlitedb 14ee8cdc3e6e0220399ff210246e1c92b7df89a0
Notes notes.db 740b7eaf93d6ea5d305e88bb349c8e9643f48c3b
Call history call_history.db a49bfab36504be1bf563c1d1813b05efd6076717

As you’ve seen, it’s rather difficult to work with files named like this. If you'd like an easier way to tell what's in your iTunes or iCloud backup, we provide a tool that does all this decoding for you. Take a look at iPhone Backup Extractor.

About the author

Andy Coles has been building and documenting iPhone Backup Extractor since it was first released. He's made a number of discoveries in the field of data recovery, most notably techniques for transferring data between iPhone backups.

Reincubate's CEO at Buckingham Palace

Pictured above are members of Reincubate’s team meeting HM Queen Elizabeth Ⅱ at Buckingham Palace, after being awarded the UK’s highest business award for our work with Apple technology. Read our position on privacy, safety and security.

We've helped over 10,000,000 people recover their lost iPhone data. Let us help you too.

Comments (1)

Thx it was useful. It helped me a lot!


Can we improve this article?

We love hearing from users: why not drop us an email, leave a comment, or tweet @reincubate?

© 2008 - 2019 Reincubate Ltd. All rights reserved. Registered in England and Wales #5189175, VAT GB151788978. Reincubate® is a registered trademark. Privacy & terms. We recommend 2FA. Built with in London.

close

For personal users

For businesses and pro users

Scroll down for business and pro plans

Basic

$39.95

iTunes support

Works with Windows and Mac

Customer support

Preview iCloud device list

Buy Basic

Premium

$69.95

iCloud and iTunes support

Works with Windows and Mac

Customer support

5 iCloud devices

Download iCloud Photo Library

Buy Premium
Jonathan Zdziarski picture

This is iPhone Backup Extractor, think of it as a "personal forensics" utility. It's pretty awesome.

Jonathan Zdziarski

Forensics and iOS expert

For business and pro users

Business

$299.95

25 iCloud devices

High priority customer support

Commercial license

All benefits of our premium plan

Buy Business
ricloud logo
Demo our APIs for enterprise

Need iCloud API access, forensic tools, bulk recovery of deleted SQLite data?

Learn about our APIs at reincubate.com.