Skip to the main content
Settingly

Apple Account and iCloud

Advanced Data Protection

Most people call this end to end encryption for almost everything in iCloud.

Advanced Data Protection extends end to end encryption to most iCloud categories, including backups and photos, so not even Apple can read them.

Available

This setting is present on your iPhone.

  • We have this path on file but have not yet confirmed it against an official source.

Where to find it - iOS 16 and later

  1. Settings
  2. Apple Account
  3. iCloud
  4. Advanced Data Protection

What it does

Without it, a core set of categories is end to end encrypted and the rest are encrypted with keys Apple also holds. With it, almost everything is encrypted with keys only your devices have.

Because Apple no longer holds a key, you must set up a recovery contact or a recovery key first. Lose both and the data is gone permanently.

What changes

When it is on

Apple cannot read your backups, photos, notes and most other iCloud data.

When it is off

Apple holds keys for many categories and can be compelled to hand data over.

Should you turn it on?

Good reasons to turn it on

  • Genuine end to end encryption for almost everything.
  • Protects against a breach of Apple's own systems.
  • Costs nothing and changes nothing about daily use.

Good reasons to turn it off

  • Losing your recovery method means losing the data forever.
  • Apple support cannot recover your account for you.
  • Web access to iCloud data needs an extra step.

Battery

No real change

Privacy

Helps

Performance

No real change

Cellular data

No real change

Storage

No real change

Out of the box: Off.

Can cause real problems

What your iPhone needs

  • Needs iOS 16.2 or later

Questions people actually ask

Should I turn on Advanced Data Protection?
Yes, if you will reliably keep a recovery key or recovery contact. Without one, a forgotten password means permanent data loss.

If it is not working

  • You must set up account recovery before it can be enabled. Do not skip this.
  • A recovery key is a string you must store somewhere safe and offline.
  • Every device signed into the account must be on a recent enough release.

Related settings