End-to-end encryption for photos, explained
Encrypted is not the same as end-to-end encrypted. The difference is who holds the key.
In short
End-to-end encryption means your photos are encrypted on your device with keys only your devices hold, so the company storing them cannot read them. iCloud Photos is end-to-end encrypted only when Advanced Data Protection is on; by default Apple holds the keys.
Key takeaways
- “Encrypted” alone usually means the provider can still decrypt.
- End-to-end: only your devices hold the keys.
- The trade-off: nobody can reset access for you.
Three kinds of “encrypted”
- In transit: protected on the way to the server, readable once it arrives.
- At rest, provider-held keys: stored encrypted, but the provider can decrypt — for support, for a legal request, or after a breach of its own systems.
- End-to-end: encrypted on your device with keys the provider never has.
In transit
protected on the way, readable on arrival
Provider can read them
YesAt rest
stored encrypted, provider holds the keys
Provider can read them
YesEnd-to-end
only your devices hold the keys
Provider can read them
NoMost services that say “your photos are encrypted” mean the first two.
Where iCloud Photos stands
Under standard data protection, Apple encrypts iCloud Photos in transit and on its servers, and holds the keys. Turning on Advanced Data Protection, available since iOS 16.2, makes iCloud Photos end-to-end encrypted, with keys held only by your trusted devices. Apple no longer offers it to new users in the United Kingdom since February 2025.
The cost of end-to-end encryption
If only you hold the key, only you can recover access. Advanced Data Protection asks you to set up a recovery contact or a recovery key for this reason. Every honest end-to-end system has the same rule: no back door for the provider means no back door for you either.
How to check an app’s claim
- Does it require an account? A password reset by email means someone other than you can open the data.
- Does it give you a recovery phrase or key? That usually means the keys really are yours.
- Does it name the algorithm and explain where keys are kept?