Apple’s Advanced Data Protection (ADP) encrypts most iCloud data end-to-end, meaning it can only be decrypted on your trusted devices, its zero-trust encryption means not even Apple can see the data on the iCloud servers.
I would like to start out by saying I am a huge fan of Apple Products I use an iPhone and Mac almost every day. The iPhone and Mac were both designed with security in mind but there are certain things that Apple does that do not always have security at heart. When your iPhone is locked, and secure Apple can’t get into the device, and they refuse to give out those keys same thing goes for things like iMessage and other end-to-end encrypted messaging services.
However, there is a catch if you back up your phone using your Mac or PC it is encrypted. Most people don’t backup that way anymore they use iCloud. iCloud will flawlessly backup your phone which includes iMessage, email, contacts, and other information to Apple iCloud in case you lose your phone or device. By default, iCloud is not encrypted, and Apple does have a history of working with law enforcement to give them iCloud backups.
You can turn off iCloud backups which would keep data local on your device and not back up to iCloud or you can turn on Apple Advanced Data Protection. The one thing to remember with ADP if you lose your device or your recovery codes you will lose your data entirely and there is nothing that can be done to recover it going forward. Apple has added a few recovery options to try to help but again making it too easy runes the point of the security.
- A recovery contact is a trusted friend or family member who can use their Apple device to help you regain access to your account and data. They won’t have any access to your account, only the ability to give you a code to help you recover your account.
- A recovery key is a secret 28-character code that you can use, along with a trusted phone number and an Apple device, to recover your account and data.
Requirements
To turn on ADP you must meet the requirements and have
- An Apple Account with two-factor authentication.
- A passcode or password is set for your device.
- At least one account recovery contact or recovery key. If you don’t already have one, you’ll be guided to set one up when you turn on Advanced Data Protection.
- Updated software on all the devices where you’re signed in using
- iOS 16.2 or higher
- MacOS 13.1 or higher
- Windows computer with iCloud for Windows 14.1 or higher
Turning On
To Turn on Apple Advanced Data Protection
On iPhone or iPad
Open the Settings app.
Tap your name, then tap iCloud.
Scroll down, tap Advanced Data Protection, then tap Turn on Advanced Data Protection.
Follow the onscreen instructions to review your recovery methods and enable Advanced Data Protection.
To Turn on Apple Advanced Data Protection
On Mac
Choose Apple menu > System Settings.
Click your name, then click iCloud.
Click Advanced Data Protection, then click Turn On.
Follow the onscreen instructions to review your recovery methods and enable Advanced Data Protection.
Who Should Turn on ADP?
Anyone worried about Apple giving up important information saved on iCloud? This could be anyone from doctors, journalists, lawyers, politicians or anyone worried about what they are saving on their devices.
I would recommend this to anyone worried about data breaches. Remember the data is saved in iCloud encrypted so if Apple should ever get hacked and you do not have Advanced Data Protection turned on your data on iCloud is sitting there for the taking by hackers.
I would recommend if you have questions and are not sure what to do contact Apple, your phone provider or a security consultant.