Advanced Data Protection for iCloud, explained
Advanced Data Protection moves the keys from Apple to your devices — and the responsibility with them.
In short
Advanced Data Protection is an optional iCloud setting that extends end-to-end encryption to most of your iCloud data, including iCloud Backup, Photos and Notes. Once it is on, Apple no longer holds the keys for that data, so you must keep a recovery method: your device passcode, a recovery contact or a recovery key. iCloud Mail, Contacts, Calendars and Shared Albums stay under standard protection.
Key takeaways
- It adds end-to-end encryption to Photos, iCloud Backup, iCloud Drive and Notes.
- Apple can no longer help you recover that data.
- Mail, Contacts, Calendars and Shared Albums are not covered.
Standard protection vs Advanced Data Protection
Under standard data protection, Apple already end-to-end encrypts 15 categories of iCloud data, such as Passwords and Keychain, Health and Messages in iCloud. The rest — including iCloud Photos and iCloud Backup — is encrypted on Apple’s servers with keys Apple holds, which is what lets Apple help you recover it.
Advanced Data Protection adds ten categories to the end-to-end list: iCloud Backup, iCloud Drive, Photos, Notes, Reminders, Safari Bookmarks, Shortcuts, Voice Memos, Wallet passes and Freeform. For those, the keys exist only on your trusted devices. Apple can’t read the data, and neither can anyone who breaches its servers.
In transit
protected on the way, readable on arrival
Provider can read them
YesAt rest
stored encrypted, provider holds the keys
Provider can read them
YesEnd-to-end
only your devices hold the keys
Provider can read them
NoTurning it on
What you need first
- An Apple Account with two-factor authentication.
- A passcode or password on your device.
- Every device signed in to your Apple Account up to date: iOS 16.2 or later on iPhone, macOS 13.1 or later on Mac, iCloud for Windows 14.1 or later on a PC.
- At least one recovery method besides your device passcode: a recovery contact or a recovery key.
Managed Apple Accounts and child accounts aren’t eligible. Apple can no longer offer Advanced Data Protection to new users in the United Kingdom.
The steps
- Update the iPhone you are using to the latest iOS.
- Open Settings › [your name] › iCloud.
- Scroll down, tap Advanced Data Protection, then tap Turn on Advanced Data Protection.
- Follow the steps to review your recovery methods.
Turning it on from one device enables it for your whole account. You can turn it off at any time from the same screen: your device then uploads the keys to Apple again and the account returns to standard protection.
Recovery: the part to get right
With Advanced Data Protection on, Apple doesn’t have the keys needed to recover your end-to-end encrypted data. If you lose access to your account, only your recovery methods can bring it back:
- Your device passcode or Mac login password, on a device you still have.
- A recovery contact: someone you trust, with their own Apple device, who can give you a code but has no access to your account or data. You can add up to five.
- A recovery key: a 28-character code. If you set one up and lose it, Apple can’t provide it again.
What it doesn’t change
- iCloud Mail, Contacts and Calendars stay under standard protection, because email, CalDAV and CardDAV don’t support end-to-end encryption.
- Shared Albums, iWork collaboration and anything shared with “anyone with the link” are not end-to-end encrypted, even with Advanced Data Protection on.
- Shared content such as an iCloud Shared Photo Library keeps end-to-end encryption only as long as every participant has Advanced Data Protection on.
- Some metadata — file types, timestamps, device names, photo checksums — stays encrypted with keys Apple holds.
- Web access at iCloud.com is turned off; if you turn it back on, a trusted device approves each temporary session.
Where a vault app fits
Advanced Data Protection protects your iCloud data from Apple and from a breach of Apple’s servers. It does nothing against someone who knows your iPhone passcode and opens Photos on the phone itself. A vault like Latent encrypts files on the iPhone with its own pattern or password before anything is backed up to your iCloud, so its backups stay unreadable to Apple whether or not Advanced Data Protection is on.