Advanced Data Protection for iCloud Photos

This optional setting extends end-to-end encryption to iCloud Photos and backups. You take on responsibility for recovery.

Open Settings, tap your name, tap iCloud, tap Advanced Data Protection and follow the prompts. Your iCloud Photos and Backup become end-to-end encrypted, so Apple does not hold the keys. You must set up a recovery contact or recovery key, because Apple cannot recover that data for you.

Under the default setting, your iCloud data is encrypted, and Apple keeps the keys so it can help you recover your account. Advanced Data Protection moves those keys to your trusted devices for most categories, including Photos, Notes and iCloud Backup. Apple then cannot decrypt that data, and Apple says the data stays secure even after a breach in the cloud.

Check that you qualify

You need:

An Apple Account with two-factor authentication
A passcode or password on your device
iOS 16.2, iPadOS 16.2, macOS 13.1 or later on every device signed in to your account, with matching minimum versions for Apple Watch, Apple TV, HomePod and iCloud for Windows

If an old device blocks you, you can remove it from your Apple Account device list and try again.

Set up recovery first

Apple guides you through this during setup. With this feature on, Apple cannot help you recover end-to-end encrypted data. You rely on these:

Device passcode or password, on a device you can still open
Recovery contact, a trusted person who can give you a code but cannot view your data
Recovery key, a 28-character code you store yourself

Pick at least one of the last two. If you use a recovery key, keep it on paper in a safe place, away from your phone. Apple warns that it cannot help if your methods fail, for example when a recovery contact’s details are out of date.

Turn it on

Update your device to the latest software.
Open Settings and tap your name.
Tap iCloud, scroll down and tap Advanced Data Protection.
Tap Turn on Advanced Data Protection.
Review your recovery methods and follow the prompts.

Turning it on from one device enables it for your whole account.

Changes you will notice

iCloud.com. Web access to your data turns off. You can turn it back on, and then approve each web sign-in from a trusted device.

New sign-ins. You can sign in to your Apple Account only on devices that meet the software requirements.

Sharing. Most sharing stays encrypted only when all participants have the feature on. Shared Albums, sharing with “anyone with the link” and iWork collaboration do not support it.

Data that stays under standard protection

Some metadata stays under standard protection. For Photos, Apple’s table includes checksums, plus whether an item is marked as a favorite, hidden or deleted. Mail, Contacts and Calendars are not end-to-end encrypted, because they need to work with outside systems.

Risks that remain

This setting protects iCloud. It leaves other risks in place, such as these:

A person with your phone and passcode can open your library and Hidden album.
Someone who talks you out of your passcode or a recovery code can get in.
Copies you sent to other people stay with them.
Apps may store their own data elsewhere, though Apple says it end-to-end encrypts third-party data in iCloud Backup and in CloudKit encrypted fields and assets.

Pair this setting with a strong passcode and Stolen Device Protection. For more on what iCloud keeps, read the Hidden album and iCloud.

Frequently asked questions

Does it protect photos from someone who knows my passcode?

No. It protects data in iCloud from access through Apple's servers. Someone with your unlocked phone or your device passcode can still open what the phone shows. Your passcode can even be a recovery method for your account.

Can I turn it off later?

Yes, at any time. Apple says your device securely uploads the required keys, and your account returns to standard data protection.

Is it available everywhere?

Apple's Platform Security guide says this feature may not be available in all countries or regions. Managed Apple Accounts and child accounts are not eligible.

Are shared albums covered?

No. Shared Albums in Photos do not support Advanced Data Protection. An iCloud Shared Photo Library stays end-to-end encrypted only if all participants have it on.