iPhone backups, encryption and your private photos

iCloud and computer backups handle encryption differently. How to encrypt a computer backup, what iCloud protects and what happens to vault apps in a backup.

Computer backups

Apple is clear: your backup is not encrypted by default. To change that:

1. Connect your iPhone to a Mac with Finder, or to a PC with the Apple Devices app.
2. On the General tab, select Encrypt local backup.
3. Create a password, and store it safely.

From then on, backups for that device are encrypted, and earlier ones are overwritten. A backup sitting unencrypted on a shared computer is worth thinking about, especially if someone else uses that login.

iCloud backups

iCloud Backup is encrypted on Apple’s servers. Under standard protection, the keys sit in Apple’s data centers. With Advanced Data Protection, the backup is end-to-end encrypted, including the Messages in iCloud key.

Apple’s table also lists some backup metadata that remains under standard protection: device name and model, a list of apps and backup dates and sizes. So a person who could read that metadata could see Backroom is installed, for example.

Vault apps and backups

Each app decides what to include. Backroom includes vaults in device backups, encrypted, so you can restore on a new phone with your recovery phrase. Someone who has the backup alone cannot open them without that phrase. Keep the phrase away from your backup, so one person can’t get both.

If you do not want vault files in iCloud Backup, you can manage it: Settings, your name, iCloud, iCloud Backup, your iPhone, then turn off the app. Apple warns this also deletes that app’s existing backup data from iCloud, which removes your safety net.