In an era of increasing digital surveillance and frequent data breaches, securing your personal information is more critical than ever. For Apple users, iCloud offers unparalleled convenience by syncing photos, messages, and documents across all devices. However, by default, Apple holds the encryption keys for most iCloud data. This means that if legally compelled, or if their servers are compromised, your data could potentially be accessed.
To provide users with ultimate control, Apple introduced Advanced Data Protection (ADP). When enabled, this feature uses end-to-end encryption for almost all of your iCloud data. This means only your trusted devices possess the decryption keys; not even Apple can access your files.
In this guide, we will walk you through exactly how to set up Advanced Data Protection for iCloud on your iPhone, iPad, or Mac.
What Does Advanced Data Protection Secure?
Before enabling the feature, it is helpful to understand what is protected. While standard iCloud secures health data, passwords, and Apple Maps search history with end-to-end encryption, Advanced Data Protection extends this level of security to 23 data categories, including:
- iCloud Backups (including Messages backups)
- iCloud Drive
- Photos
- Notes
- Reminders
- Safari Bookmarks
- Voice Memos
Note: iCloud Mail, Contacts, and Calendar are not covered by ADP because these services must integrate with legacy global protocols (like IMAP and CalDAV) to function correctly.
Prerequisites for Enabling Advanced Data Protection
Because Apple will no longer have the keys to your data, you must take full responsibility for account recovery. If you lose access to your account and forget your password, Apple cannot help you recover your files. Therefore, you must fulfill the following requirements:
- Two-Factor Authentication (2FA) must be enabled for your Apple ID.
- You must set up at least one alternative recovery method: a Recovery Contact or a Recovery Key.
- All devices signed into your Apple ID must be updated to at least iOS 16.2, iPadOS 16.2, macOS 13.1, or watchOS 9.2. (If you have older devices that cannot be updated, you must sign out of iCloud on them before enabling ADP).
Step 1: Set Up an Account Recovery Method
The first step is establishing a fail-safe in case you lose your password.
Option A: Add a Recovery Contact (Recommended)
A Recovery Contact is a trusted friend or family member who uses an Apple device. If you are locked out, they can generate a code on their device to help you regain access.
- Open Settings on your iPhone or iPad.
- Tap your Name (Apple ID) at the top of the screen.
- Select Sign-In & Security, then tap Account Recovery.
- Under “Recovery Assistance,” tap Add Recovery Contact and follow the on-screen prompts to select someone from your contacts.
Option B: Generate a Recovery Key
A Recovery Key is a randomly generated 28-character code that you must store safely (e.g., in a physical safe or a trusted password manager). If you lose this key and your password, your data is gone forever.
- Navigate to Account Recovery using the steps above.
- Tap Recovery Key.
- Toggle it on, and write down the 28-character code displayed on the screen.
- The system will immediately prompt you to type the key back in to verify you have saved it.
Step 2: Turn on Advanced Data Protection
With your recovery method secured, you can now enable end-to-end encryption for your iCloud data.
- Open Settings and tap your Name (Apple ID).
- Tap iCloud.
- Scroll down to the bottom of the iCloud menu and select Advanced Data Protection.
- Tap Turn On Advanced Data Protection.
- Review the information on the screen, which outlines what data will be secured.
- Follow the prompts to review your recovery methods and enter your device passcode to confirm the change.
The process will take a few moments as your devices encrypt the existing data on Apple’s servers using your local keys.
How to Disable Advanced Data Protection
If you decide you no longer want the responsibility of managing your own encryption keys, you can easily revert to Standard Data Protection.
- Go to Settings > [Your Name] > iCloud > Advanced Data Protection.
- Tap Turn Off Advanced Data Protection.
- Follow the on-screen instructions to authorise the change.
Your devices will securely upload the necessary encryption keys back to Apple’s servers, restoring the default cloud backup behaviour.
Enabling Advanced Data Protection is one of the most impactful steps you can take to secure your digital life within the Apple ecosystem. By taking control of your encryption keys, you ensure your private photos, documents, and backups remain exclusively yours.