Advanced Data Protection for iCloud: How to Use Apple's Strongest Encryption Tier

With Advanced Data Protection, Apple raises iCloud security to a new level: end-to-end encryption for 25 data categories instead of 15, including iCloud Backup, Photos and Notes. Apple itself can then no longer access this data – not even under a court order. Anyone who enables the feature gains maximum data control, but also takes on full responsibility for recovery. What the feature technically delivers, who should use it and what pitfalls lie in wait is covered in our complete overview.

By default, iCloud does store data in encrypted form, but Apple keeps the keys in its own data centers – for example to reset forgotten passwords or to comply with legal requirements. With Advanced Data Protection for iCloud (ADP), key authority moves from Apple's data center to your own devices. This is the radical consequence of the security promise Apple has made to its users for years – with all the advantages and risks that this self-administration entails. Anyone enabling ADP should first have two-factor authentication for the Apple Account properly set up – this is a mandatory requirement. As a supplement, Lockdown Mode is available for people with an elevated threat profile.

What Advanced Data Protection delivers technically

In standard mode, iCloud encrypts data both in transit and at rest, but keeps the encryption keys in Apple's data centers. 15 particularly sensitive data categories – including passwords in iCloud Keychain, Health data and Apple Card transactions – are already end-to-end encrypted by default. Apple has no key access here.

With Advanced Data Protection, the number of end-to-end encrypted data categories rises from 15 to 25. The additionally protected categories include:

• iCloud Backup (including device and Messages backup)
• iCloud Drive
• Photos
• Notes
• Reminders
• Safari Bookmarks
• Siri Shortcuts
• Voice Memos
• Wallet passes
• Freeform
• Certain data from third-party apps

Three iCloud categories remain excluded even with ADP: iCloud Mail, Contacts and Calendars. Apple justifies this with the need to interoperate with global standards (CalDAV, CardDAV, SMTP) – which do not support end-to-end encryption. Anyone wanting additional security here can fall back on the S/MIME standard for email, which all native Apple email clients support.

Technically, activation runs through Apple's Hardware Security Modules (HSMs) in the data centers. As soon as a user enables Advanced Data Protection, the available-after-authentication service keys are irrevocably deleted from the HSMs. Apple cannot restore these keys afterwards.

Requirements for Activation

Apple sets out five conditions for using Advanced Data Protection:

• An Apple Account with two-factor authentication enabled
• A passcode or login password set on the device
• At least one recovery contact or one recovery key
• Up-to-date software on all devices linked to the Apple Account: iOS 16.2 or later, iPadOS 16.2 or later, macOS 13.1 or later, watchOS 9.2 or later, tvOS 16.2 or later, visionOS 1 or later, HomePod Software 16.2 or later
• The account is not a child account and not a Managed Apple Account (such as company or school accounts)

Anyone who has not yet set up a recovery contact or recovery key is guided through the setup step by step during activation. This is Apple's safeguard against the feature's biggest pitfall: since Apple can no longer perform account recovery without the encryption keys, a user without a fallback would permanently lose access in an emergency.

Enabling Advanced Data Protection

On iPhone or iPad:

1. Open Settings
2. Tap your name
3. Select "iCloud"
4. Scroll down and tap "Advanced Data Protection"
5. Select "Turn On Advanced Data Protection"
6. Follow the instructions to review or set up your recovery methods

On Mac:

1. Apple menu → System Settings
2. Click your name
3. Select "iCloud"
4. Select "Advanced Data Protection"
5. Click "Turn On"
6. Review or set up your recovery methods

If a device blocks activation – for example because it is running on too old a software version or has not been used for a while – Apple suggests either updating the device or removing it from the Apple Account device list and then trying again.

What changes after activation

With Advanced Data Protection enabled, a number of behaviors change that users will notice in everyday use:

iCloud.com web access is initially disabled. The reason: Apple's web servers no longer have access to the keys needed for decryption. Users can manually re-enable web access, but must then authorize every iCloud.com session via a trusted device. The authorization is valid for one hour at a time. During this period, the Apple device uploads individual service keys – but only for services that are normally accessible on the web. Health data or passwords from iCloud Keychain remain inaccessible even then.

Shares with other users remain end-to-end encrypted – as long as all participants have ADP enabled. As soon as a person without ADP contributes to a shared note, a shared reminder, a shared iCloud Drive folder or a shared photo library, the protection for that share drops back to the standard level.

Three features are fundamentally not ADP-capable:

• iWork collaboration in Pages, Numbers and Keynote
• Shared Albums in the Photos app
• Shares with the "Anyone with the link" option

These features remain protected under standard data protection, because Apple's servers need access to the encryption keys to handle the sharing mechanics.

Apple collects limited telemetry data. Success or failure when enabling the feature, frequency of key rotations, performance of the recovery contact function – this data is linked to the Apple Account to improve the reliability of account recovery. Apple communicates this transparently in its privacy notices.

Recovery in an emergency

If access to the Apple Account is lost, only three possible paths to data recovery remain with ADP enabled:

• Device passcode or login password of an already set up Apple device
• Recovery contact – a trusted person who generates and transmits a recovery code in an emergency
• Recovery key – a 28-character code that the account holder keeps themselves

Anyone who can no longer use one of these three paths loses the data permanently. Apple itself no longer has access – not even Apple Support can intervene. This consequence is explicitly emphasized throughout Apple's documentation and is the reason why the feature requires well-thought-out preparation.

A recovery contact does not gain any access to the account or its data themselves. They can only generate a recovery code and pass it on to the account holder – in person or by phone. For privacy reasons, Apple does not even know the identity of the contact until they are actually asked for help in an emergency. The mechanism runs end-to-end via the SPAKE2+ protocol and CloudKit containers.

Who should use ADP – and who better not

Apple does not position Advanced Data Protection as a default recommendation, but as an optional extension for users with heightened security awareness or a specific need for protection. Four typical profiles help with a well-founded decision:

A good fit for:

• People with politically or professionally sensitive data (journalists, lawyers, activists, NGO employees)
• Families who want to protect their backups and photos from state access requests
• Privacy-conscious users who fundamentally distrust Apple's commercial storage location
• People who handle highly sensitive personal data (health histories, financial records, confidential notes)

Rather unsuitable for:

• Users who often need Apple Support for forgotten passwords
• People who, based on experience, do not reliably maintain recovery keys or contacts
• People who regularly work on iCloud.com from the browser (possible, but more cumbersome)
• Family groups in which multiple people collaborate via iWork or shared albums

The feature can be turned off again at any time. In that case, the device automatically and securely uploads the encryption keys back to Apple's servers, and the account once again uses standard data protection. So anyone who is unsure can enable ADP as a test and check the impact in everyday use.

What the UK conflict means

Advanced Data Protection has received increased attention in recent months – not because of technical changes, but because of a political dispute. In February 2025, the Washington Post reported that the British government had used a Technical Capability Notice (TCN) under the Investigatory Powers Act 2016 to demand access to iCloud data worldwide – including data encrypted via ADP. Apple decided against weakening the encryption and instead withdrew the ADP feature for UK users in February 2025.

In August 2025, it was initially reported that the UK had withdrawn its demand, but Apple did not reactivate ADP for UK users. In early October 2025, it became known that the UK had issued a new, adjusted order – this time targeting British users only. The conflict illustrates what is politically at stake with ADP: Apple has to navigate between the security promises made to its users and the legal requirements of individual countries. In Germany and most other EU countries, ADP remains available without restriction.

This dispute also illustrates why ADP is attractive to security-conscious users: the feature makes it technically impossible for Apple to hand over data to authorities – even under a court order. Apple can only hand over what Apple itself can decrypt. With ADP enabled, that is only a smaller fraction of the iCloud data.

What ADP is not

Despite all the enthusiasm for the feature: ADP does not replace every other safety measure. Three common misconceptions:

ADP does not protect against password theft. Anyone who hands over the Apple Account password and a 2FA code in plain text – for example through phishing – still lets an attacker access the account. ADP only prevents Apple itself from accessing the data. It does not protect against account takeover. Anyone who wants to minimize risk here should also use a strong Apple Account password and watch for phishing warning signs.

ADP does not protect against device theft with passcode observation. Anyone who has their iPhone stolen AND was previously watched entering the device passcode has a different problem – that is what Stolen Device Protection addresses.

ADP does not replace local backups. Anyone who wants maximum protection against data loss should additionally create regular local, unencrypted backups (for example via Time Machine or iTunes/Finder). Even the best cloud protection does not help if the account is locked or deleted.

A question of trust and preparation

Advanced Data Protection for iCloud is the strongest security tool Apple offers to private users. It turns iCloud into a truly private cloud storage that is largely shielded even against government access requests. The price for this is full personal responsibility: anyone who simultaneously loses access to the account and to all recovery methods loses the data permanently. But this fact is not a weakness of the feature, it is part of its design logic – only because Apple has no backdoor are the data actually secure. Anyone who properly sets up a recovery contact AND a recovery key minimizes the risk and gains a layer of protection that has few equals in the industry.

Time for fresh accessories? Visit our Amazon Storefront and discover a wide selection of products from leading manufacturers, including for HomeKit!

• NameDrop on iPhone and Apple Watch: How to Use It Right
• Two-Factor Authentication for the Apple Account: Setup Guide, Options and Security Levels
• Using Passkeys on Apple Devices: How Passwordless Sign-In Works
• Activate and properly use Stolen Device Protection on iPhone
• Pegasus and Commercial Spyware on iPhone: What Users Really Need to Know
• Secure email usage on the iPhone
• AI makes your iPhone more secure – what that really means for you
• Apple Security Updates: How Apple protects your Devices
• Ransomware explained: Could my iPhone be affected?
• Identity theft: What to do if your Data has been stolen?
• Recognizing Social Engineering: How to Protect Yourself from Manipulation
• Detecting AI fraud: Deepfakes, fake voices and how to protect yourself
• Recognizing Quishing: How to protect yourself from QR code fraud
• Use public Wi-Fi safely: How to protect your iPhone
• iOS 26.4: Show Hotspot Data usage per Device
• Recognizing Smishing: How to protect yourself from SMS fraud
• Create and manage secure passwords: The Apple guide
• WhatsApp hacked: How to protect your Account
• Recognizing Phishing: How to protect yourself from fraud
• Creating, Changing, and Deleting an Apple ID: The complete Overview
• Activate iPhone Call forwarding: All Methods under iOS 26

Frequently Asked Questions about Advanced Data Protection for iCloud

Have you already checked out our Amazon Storefront? You'll find a hand-picked selection of various products for your iPhone and other devices there – enjoy browsing.

This post contains affiliate links.