How to Turn On iCloud Advanced Data Protection (and What You Give Up)

Advanced Data Protection (ADP) is an optional iCloud setting that Apple calls its highest level of cloud data security. With it turned on, Apple says most of your iCloud data, including iCloud Backup, Photos and Notes, is end-to-end encrypted, so no one else can read it, not even Apple, even if its cloud is breached.

Requirements

• An Apple Account with two-factor authentication, and a passcode or password on your device.
• Every device signed in to your account must be up to date: iOS/iPadOS 16.2, macOS 13.1, watchOS 9.2, tvOS 16.2, HomePod 16.0, iCloud for Windows 14.1 or later.
• Managed Apple Accounts and child accounts can't use it.

Step 0: set up recovery

This is the step that matters most. With ADP on, Apple doesn't have the keys to recover your data. You'll be guided to set up at least one recovery contact (a trusted person who can give you a code but can't see your data) or a recovery key (a 28-character code). Store a recovery key somewhere safe and offline.

Turn it on

iPhone or iPad: update the software, then open Settings › [your name] › iCloud › Advanced Data Protection › Turn on Advanced Data Protection, and follow the prompts.

Mac: Apple menu › System Settings › [your name] › iCloud › Advanced Data Protection › Turn On.

Turning it on from one device enables it for your whole account. If an older device blocks it, Apple says you can remove that device from your account and try again.

What you give up

• iCloud.com access is turned off by default. You can approve temporary web access from a trusted device.
• Some sharing isn't covered: iWork collaboration, Shared Albums and "anyone with the link" sharing aren't end-to-end encrypted, even with ADP on.
• You can only sign in on devices that meet the software requirements.

You can turn ADP off at any time from the same screen.

More: How-To.