Apple offers end-to-end encryption for many more types of iCloud data than it once did. Advanced Data Protection encrypts iCloud Photos, Notes, iCloud Backup and more. But you have to activate the feature to take advantage of the data protection. It is easy … once you find the switch buried in Settings.
We can save you some time. Here’s how and why you should activate it.
Critical iCloud encryption
Advanced Data Protection for iCloud is all about encryption. This converts data into a form that can only be unlocked with a passcode. The user is the only one with access to that passcode. Without it, not even Apple can decrypt a file. So if you’re serious about protecting your data, this is the way to go.
Encryption isn’t new to iCloud. Previously, Apple’s cloud-storage service offered end-to-end encryption for 14 data categories. When Advanced Data Protection for iCloud debuted, the number increased to 23.
Perhaps most notably, the list includes images stored on the service. Apple dropped its controversial plan to scan users’ photos for child sexual abuse material. Instead, it gives users the option to block anyone else from ever accessing them.
And don’t miss that backups of your devices are encrypted as well. The Electronic Frontier Foundation calls it “a big win for user privacy, and sets a new bar for the safety of cloud device backups.”
The new Advanced Data Protection for iCloud feature is part of iOS, macOS and iPadOS. At launch, the feature could only be used in the United States, but it went global in 2023.
How to activate Advanced Data Protection for iCloud
Turning on Advanced Data Protection for iCloud is easy. Finding the switch is not. It’s buried deep in the Settings app. Here’s a step-by-step guide to locating it on an iPhone or iPad. The macOS process is very similar.
- Open the Settings app.
- Tap your name near the top of the screen to open Apple ID settings.
- Then tap on iCloud.
- Tap on Advanced Data Protection
- This opens a screen with an overview of the new privacy feature. At the bottom, tap on Turn On Advanced Data Protection.
Important: Set up Account Recovery
Some people might wonder why Advanced Data Protection isn’t on by default. It’s left as an option because encryption is for keeps. If you lose or forget your Apple ID password, everything you encrypted will remain locked away forever. Begging Apple to help recover the only pictures of your newborn baby won’t help, because Apple doesn’t have the passcode.
That’s why Apple’s encryption system for iCloud requires you to set up a method to recover your account. Setting this up is as complicated as activating Advanced Data Protection gets … which isn’t very complicated.
You have two options:
- You can name someone as your Recovery Contact that can “generate a code from their Apple device to help you get your data back,” Apple says. That person cannot access your data without you.
- Alternatively, your iPhone can generate a 28-character Recovery Key that you can use to give yourself access to your account.
Data types protected by Advanced Data Protection for iCloud
It’s important to know what types of iCloud data are encrypted once you turn on Advanced Data Protection — and which aren’t. Activating the feature will turn on encryption for:
- Device and Messages backups
- iCloud Drive
- Notes
- Photos
- Reminders
- Safari Bookmarks
- Siri Shortcuts
- Voice Memos
- Wallet Passes
iCloud already offered end-to-end encryption on a variety of other data, including passwords in iCloud Keychain and everything in Health data, is switched on by default, you cannot deactivate it.
But not everything in the cloud-storage system is encrypted. As Apple notes, “The only major iCloud data categories that are not covered are iCloud Mail, Contacts, and Calendar because of the need to interoperate with the global email, contacts, and calendar systems.”
This article on Advanced Data Protection for iCloud was first published in January 2023. It’s been updated to reflect design changes in the Settings app.