Can Apple See My iCloud Photos?
By default, Apple can. iCloud Photos is not end-to-end encrypted under standard data protection, so Apple holds the keys. Advanced Data Protection changes that, and you have to turn it on yourself.
What do I need to know?
- Standard protection is not end-to-end for photos. Apple says 15 data categories are end-to-end encrypted. Photos and iCloud Backup are not among them.
- Apple can decrypt standard data. Apple's wording is that it can do so "whenever you need it", such as when you restore a backup.
- Advanced Data Protection covers photos. It raises the end-to-end categories to 25, including Photos and iCloud Backup.
Can Apple see my photos with standard protection?
Apple holds the encryption keys for photos under standard protection. That is how it can recover your data if you forget your password. It also means the protection is not end-to-end.
Apple's page describes the purpose as helping you, such as signing in on a new device. It does not say more than that, and neither do we.
What does Advanced Data Protection change?
With it on, your iCloud Backup, Photos and Notes use end-to-end encryption. Apple no longer holds the keys for those categories.
It has been an option since iOS 16.2. Apple's iCloud data security overview lists every category and the exact requirements.
What about photos I keep in a vault app?
A vault app keeps files outside your Photos library, so iCloud Photos does not sync them. What reaches iCloud depends on the app.
Cryptile makes its own encrypted iCloud backup. Every file is AES-256-GCM ciphertext under a key made on your device from your pattern. Apple sees ciphertext and recovery salts, not keys. Restoring needs your 9-word recovery phrase.
Which protection do I need?
- Photos anyone could see: standard iCloud Photos is fine.
- Photos you want hidden from Apple's servers: turn on Advanced Data Protection.
- Photos you want hidden even on your own phone: keep them in an encrypted vault, not the Photos library.
Our guide to encrypting photos on iPhone has the steps.
What this doesn't protect against
Encryption on Apple's side does nothing for a photo still in your Photos library on an unlocked phone. A vault cannot help if someone watches you draw your pattern. A short pattern is weaker than a passphrase, so use 8 or more cells. If you lose both your pattern and your recovery phrase, the vault is gone.
Do it with Cryptile
Cryptile has no account and no server, and the developer never holds your keys. A different pattern opens a different vault.
Cryptile is free for up to 3 vaults, 100 photos and 10 videos in total. Plus removes the limits and adds the panic pattern and search inside the vault. It costs $19.99 a year (7-day free trial), $39.99 once, or $1.99 a week.
Cryptile Send, Files-app access, shared vaults and sync are coming and are not available yet.