Advanced Data Protection for iCloud Photos, Explained
Advanced Data Protection is an iCloud setting that end-to-end encrypts your Photos, Notes, iCloud Drive and iCloud Backup. With it on, Apple has no key to your photos. It is built into iOS, free, and you do not need an app for it.
The cost is recovery. If you lose access to your account, Apple cannot get your data back for you.
Try Cryptile free: join the beta on TestFlight
What do I need to know?
- It is off by default. Without it, Apple keeps the keys to iCloud Photos and iCloud Backup.
- You must set up a recovery method first. Apple asks for a recovery contact or a recovery key.
- It protects iCloud, not the phone. Anyone who unlocks your iPhone still sees every photo on it.
What does it encrypt?
Apple's iCloud data security overview says it raises end-to-end encryption to 25 data categories. That "includes your iCloud Backup, Photos, Notes, and more."
Apple's iOS 27 guide lists device backup, Messages backup, iCloud Drive, Notes, Photos, Reminders, Safari bookmarks, Shortcuts, Voice Memos and Wallet passes. It says your data "can be decrypted only on your trusted devices."
What does it not encrypt?
Apple names these gaps on the same overview page:
- iCloud Mail, Contacts and Calendars. They use standards that do not support end-to-end encryption.
- Shared Albums. Apple says the Shared Albums feature in Photos does not support it. Nor do links shared with "anyone with the link."
- Some metadata. File checksums, modification dates and backup details stay under standard protection.
A Shared Library keeps end-to-end encryption only if every participant has Advanced Data Protection on.
How do I turn it on? (iOS 27)
You need iOS 16.2 or later, two-factor authentication, a device passcode, and up-to-date software on every device signed in to your Apple Account. Those requirements are on Apple's setup page.
- Open Settings and tap your name.
- Tap iCloud, then Advanced Data Protection.
- If asked, tap Account Recovery and set up a Recovery Contact or Recovery Key.
- Tap Turn On Advanced Data Protection and follow the prompts.
Write a recovery key on paper and keep it away from the phone. Apple's guide warns: "you're responsible for your data recovery."
Can I still see my photos on iCloud.com?
Not by default. Apple says access to your data on iCloud.com is turned off when you turn on Advanced Data Protection. You can choose to turn web access back on.
Is it available everywhere?
No. Apple says it can no longer offer it to new users in the United Kingdom. It remains available everywhere else, according to Apple.
Should I turn it on?
If you use iCloud Photos and you can keep a recovery key safe, it is a good default. It means a breach at Apple, or a request to Apple, does not expose your photo library.
If you tend to forget passwords and have no one to act as a recovery contact, think first. Losing access means losing the data.
What this doesn't protect against
Advanced Data Protection does nothing once your phone is unlocked. Someone with your passcode can open Photos, including the Hidden album. It also does not cover Shared Albums, copies you have sent to other people, or photos in other apps' clouds.
Do it with Cryptile
Cryptile adds a separate lock on the phone itself. Photos are encrypted with AES-256-GCM under a key made from a pattern you draw, and its iCloud backup is ciphertext with or without Advanced Data Protection.
Cryptile is free for up to 2 vaults, 100 photos and 10 videos, with encrypted iCloud backup included. Plus adds search inside the vault and the panic pattern for $19.99 a year (7-day free trial) or $39.99 once.