Advanced Data Protection

Advanced Data Protection provides Apple’s highest level of cloud data security by extending end-to-end encryption to additional categories of iCloud data, including iCloud Backup, Photos, Notes, and iCloud Drive. Protected data can be decrypted only on your trusted devices, so it remains protected even if Apple’s cloud systems are breached. Apple does not hold the encryption keys needed to access this protected data.

Advanced Data Protection requires two-factor authentication, a device passcode or password, and an account recovery method. You must set up either a Recovery Contact or Recovery Key before enabling it. Devices signed in to your Apple Account must also meet Apple’s minimum software requirements.

When Advanced Data Protection is turned on, access to your iCloud data through iCloud.com is automatically disabled. You can turn web access back on if needed, but a trusted device must approve temporary access to the encrypted data.

Because Apple does not hold the encryption keys for data protected by Advanced Data Protection, you are responsible for maintaining access to your recovery methods.