What end-to-end encryption means for your photos
End-to-end means only your devices can decrypt. Where it applies on iPhone, where it does not, and how it differs from a vault on your phone.
With end-to-end encryption, your data can be decrypted only on your trusted devices, and the company storing it does not hold the keys. On iCloud, Photos gets this only if you turn on Advanced Data Protection. It protects you from cloud breaches and requests to the provider, and has no effect on a person holding your unlocked phone.
The plain version
With ordinary cloud storage, your photos are encrypted, and the company has the key. It can open them when it needs to: to help you recover a forgotten password, to answer a legal request, or if its systems are compromised.
With end-to-end encryption, the keys stay on your devices. Apple’s description: no one else can access this data, not even Apple, and it stays secure in the case of a data breach in the cloud.
What it costs you
- Recovery. Lose your keys and the provider cannot rescue you.
- Web access. Apple turns off iCloud.com access by default under Advanced Data Protection.
- Metadata. Apple lists details such as dates and checksums that remain under standard protection. Proton says its Drive secures metadata such as filenames and sizes, so check each service.
- Sharing. Apple’s Shared Albums and anyone-with-a-link sharing fall outside it.
What it does not do
It does nothing for someone with your unlocked phone. It does not stop the person you shared with from saving a photo. Malware on your device sees what you see.
How to pick
Worried about the cloud: choose end-to-end encrypted storage, such as Advanced Data Protection, Ente or Proton Drive. Worried about a person with your phone: add a separate lock, such as a vault with its own secret. Many people have reason to do both.
Frequently asked questions
Is it the same as zero knowledge?
They overlap. Zero knowledge is a looser marketing term for a provider that cannot read your data. Check what the provider says about keys, metadata and recovery.
Is Backroom end-to-end encrypted?
Backroom has no server, so there is no second end. Files are encrypted on your iPhone, and we never hold them or the keys.
What if I lose access?
The provider cannot help. With Apple, you use a device passcode, recovery contact or recovery key, and Apple says you must set one up before turning on Advanced Data Protection.