Advanced Data Protection (iCloud)
Also known as: iCloud Advanced Data Protection, ADP (iCloud), iCloud end-to-end encryption
Advanced Data Protection is an optional iCloud security setting that extends end-to-end encryption to most iCloud data, including device backups, photos, notes, and iCloud Drive files.
With it on, only your trusted devices hold the keys, so Apple can't read the data or hand it over in readable form. You must set up a recovery contact or recovery key, because Apple can't help you recover data if you lose access. While it offers much stronger privacy, it means more responsibility for keeping recovery options safe.
Advanced Data Protection (iCloud), explained at three levels
At home
Think of iCloud as a storage locker. Normally Apple keeps a spare key, so it can help if you lose yours. Advanced Data Protection is like changing the lock so only your own devices hold the keys. Your iPhone scrambles your photos, notes and backups before they leave it, so Apple stores only locked boxes it cannot open. Lose every key, and nobody can help.
At work
Advanced Data Protection is an optional iCloud setting that end-to-end encrypts most iCloud data, including backups, photos and iCloud Drive, so only the user's devices hold the keys and Apple cannot read it. Businesses care because staff may turn it on for personal iPhones, which puts that data beyond company reach, so work data belongs in company-managed services instead.
At home
Standard iCloud already encrypts your data, but Apple holds the keys for many categories, so it can help you recover your account and can respond to valid legal requests. Advanced Data Protection moves those keys to your trusted devices only. Your iPhone and Mac encrypt photos, notes, backups and other data before upload, and Apple stores only scrambled data it cannot read. Because Apple no longer holds a key, recovery depends entirely on your own devices, recovery contact or recovery key.
At work
With Advanced Data Protection on, end-to-end encryption expands from 14 data categories to 23, adding iCloud Backup, Photos, Notes, iCloud Drive and others. iCloud Mail, Contacts and Calendars stay outside it, because they must work with standard email and calendar systems. Shared items require all participants to have it enabled to stay fully protected. Apple withdrew the feature for new UK users in 2025 after a government demand under the Investigatory Powers Act.
At home
With Advanced Data Protection, losing access means losing data. If all your Apple devices are lost or reset and you no longer have your recovery key or a recovery contact who can help, Apple cannot restore your photos or backups, because it never had the keys. You also need every device signed in to your account running a recent software version. In my view, store the recovery key somewhere very safe, and choose a recovery contact, before turning it on.
At work
End-to-end encrypted personal iCloud accounts are outside an organization's reach for legal holds, investigations and departures, so keep corporate data in managed services rather than personal iCloud. Managed Apple Accounts cannot enable Advanced Data Protection, preserving organizational control. Device policies can restrict iCloud sync for managed apps and data. Include recovery planning in guidance for executives and high-risk staff who use the feature on personal devices.
Real-world examples
At home
Nadia turned on Advanced Data Protection and printed her recovery key, storing it with her passport, so her photos and backups were end-to-end encrypted.
At work
Marcus's Winnipeg MSP advised a client's executives to enable Advanced Data Protection on personal iPhones, while keeping company files in Microsoft 365.
How it compares
| feature | Standard iCloud protection | Advanced Data Protection (iCloud) |
|---|---|---|
| Who holds keys | Apple, for many data types | Only your devices |
| Apple can recover data | Yes | No |
| Covers backups and photos | Encrypted, but not end to end | End-to-end encrypted |
| Your responsibility | Lower | Keep recovery options safe |
Advanced Data Protection trades easy recovery for stronger privacy.
For analysts
When advising executives on device security, I'd explain this trade-off plainly. Stronger encryption is great, but only if recovery is planned.
History & origin
Apple has long end-to-end encrypted some iCloud data, such as passwords and health data, but standard iCloud backups and photos were encrypted with keys Apple held. In December 2022, Apple announced Advanced Data Protection, launching it in the US that month and worldwide in January 2023. In February 2025, Apple withdrew the feature for new users in the United Kingdom after the UK government reportedly demanded access to encrypted data under its Investigatory Powers Act, and Apple challenged the order. Reports later suggested the UK government revisited its demand, though the situation remained unsettled. In my view, the UK episode showed that encryption features can depend on politics as much as technology.