Not trying to nitpick, but it wouldn't necessarily be the case that you would have to enter a password. You could encrypt against an HOTP on the device and perform secure key erasure for the N-1th photo and previous. You'd then have a server which would be able to decrypt based on a one time shared secret (the HOTP root).