iCloud Advanced Data Protection for Photos: What It Changes
Advanced Data Protection is an optional iCloud setting. Apple says it applies end-to-end encryption to most iCloud data, including Photos, so the keys stay on your trusted devices. Apple then cannot help you recover that data. You must set up a recovery contact or recovery key first. Shared Albums are not covered.
Steps use macOS 14 and later names. Menu wording can differ slightly between versions.
Standard protection vs Advanced Data Protection
| Setting | Photos are encrypted | Who holds the keys | If you lose access |
|---|---|---|---|
| Standard data protection | In transit and on the server | Apple | Apple can help you recover. |
| Advanced Data Protection | End-to-end | Your trusted devices | Apple cannot help. You use a recovery method. |
Apple says that under standard protection the encryption keys are stored in its data centers so that it can help you with recovery. With Advanced Data Protection, Apple does not have the keys.
What you need first
- An Apple Account with two-factor authentication.
- A passcode or password set on your device.
- Updated software on every device signed in to your account. Apple lists iOS and iPadOS 16.2, macOS 13.1, watchOS 9.2, tvOS 16.2, HomePod 16.0 and iCloud for Windows 14.1 as the minimum.
- At least one recovery method: a recovery contact or a recovery key.
- A standard account. Apple says Managed Apple Accounts and child accounts are not eligible.
Turn on Advanced Data Protection
-
Update every device
Install the latest software on each device that uses your Apple Account. If a device blocks activation, Apple says you can remove it from your device list and try again.
-
On an iPhone or iPad
Open Settings, tap your name, tap iCloud, scroll down and tap Advanced Data Protection. Tap Turn on Advanced Data Protection and follow the screen.
-
On a Mac
Choose the Apple menu, then System Settings. Click your name, click iCloud, click Advanced Data Protection and click Turn On.
-
Set up recovery
Apple guides you to add a recovery contact or a recovery key. Apple describes a recovery key as a 28-character code. Store it away from the device it protects.
Apple says turning it on from one device enables it for your whole account.
Recovery methods in plain terms
- Your device passcode or password. Apple lists it as one way back in.
- A recovery contact. A trusted person who can give you a code to help you regain access. Apple says they cannot see your account.
- A recovery key. A 28-character code that you use with a trusted phone number and an Apple device.
If every method fails, Apple says it cannot help you recover end-to-end encrypted data. Choose people and places you can still reach in five years, not only today.
What it still leaves open for Photos
- Shared Albums. Apple says the Shared Albums feature does not support Advanced Data Protection, so those photos use standard protection.
- Some metadata. Apple lists items such as the checksum of a photo, whether an item is a favorite or hidden, and when it was created or imported. The page says this data is encrypted, but Apple still stores the keys.
- Web access. Apple says iCloud.com access is turned off while it is on. You can approve temporary access from a trusted device.
- Your device. It protects data in iCloud. Someone who knows your passcode can still open the Photos app on your unlocked device.
Should you turn it on?
- Consider it if your worry is a break-in to your iCloud account, or you do not want Apple to hold the keys to your photos, and you can keep a recovery method safe.
- Wait if you cannot update every signed-in device, or if you rely on iCloud.com access, which Apple turns off by default with this setting.
- Look elsewhere if your worry is someone using your unlocked device. For that you need a lock with its own key, such as an encrypted container.
Turn it off
On an iPhone, open Settings, tap your name, tap iCloud and turn off Advanced Data Protection. On a Mac, open System Settings, click your name, click iCloud, click Advanced Data Protection and click Turn Off. Apple says your device then uploads the required keys to its servers and your account returns to standard protection.
How it fits with a private vault
This setting protects what is stored in iCloud. It does not create a second lock inside your Photos library. The Hidden album still unlocks with your device unlock. See Hidden album vs a vault and where to store private photos. If you do not want certain photos in iCloud at all, read photos you do not want in iCloud.
Frequently asked questions
Are iCloud Photos end-to-end encrypted by default?
No. Under standard protection Apple holds the keys. Advanced Data Protection changes Photos to end-to-end encryption, per Apple.
Can Apple read my photos with Advanced Data Protection on?
Apple says the encryption keys are not available to Apple for the data it protects, so Apple cannot access that data.
What happens if I lose my passcode and my recovery methods?
Apple says it cannot help you recover end-to-end encrypted data. You must use one of your recovery methods.
Does it cover Shared Albums?
No. Apple says Shared Albums use standard data protection.
Can I turn Advanced Data Protection off?
Yes. Turn it off in iCloud settings. Your account then returns to standard data protection.
Does it replace the Hidden album?
No. They do different jobs. One encrypts data in iCloud. The other locks hidden photos on your device. You can use both.
References
Your files. Your Mac. Locked.
Coming soon. Join the waitlist and we email the link.
Get early access