In addition to the optional expansion of end-to-end encryption to many other iCloud data categories, Apple today also announced two other new security features designed to protect against threats to user data in the cloud.
According to Apple, the new iMessage Contact Key Verification and Security Keys for Apple ID features will be available worldwide on iPhone and other devices in 2023 available iMessage Contact Key Verification allows users who face "extraordinary digital threats," such as journalists, human rights activists and government officials, to ensure they are communicating only with the people they intend to. In conversations between users who have iMessage Contact Key Verification enabled, users will be warned if a state-backed attacker or other malicious actor manages to break into the cloud servers and infiltrate their own device to eavesdrop on the conversation.
Apple announces new security features for iMessage and Apple ID
As an additional layer of security, iMessage Contact Key Verification users can compare a contact verification code in person, over FaceTime, or over another secure call to ensure they are only communicating with the people they intend to. Second, Apple ID Security Keys let users use third-party physical security keys to further protect their account. For users who enable this feature, Security Keys strengthens Apple's two-factor authentication by requiring a hardware security key as one of the two factors instead of an authentication code. Craig Federighi, Apple's chief software engineer, commented on the issue:
Our security teams work tirelessly to protect users' data. With iMessage Contact Key Verification, Security Keys, and Advanced Data Protection for iCloud, users have three powerful new tools to help them better protect their sensitive data and communications.
According to Apple, both iMessage and Apple ID security features will be made available worldwide in 2023. (Image: Apple)
