What it protects
With Advanced Data Protection (ADP), iCloud Photos, iCloud Backup, Notes and several other categories are end-to-end encrypted. Apple no longer holds the keys, so a breach of iCloud, or a request to Apple, yields ciphertext.
What it doesn't
- Your unlocked phone. Anyone with your passcode can still open Photos and the Hidden album.
- Shared content. Shared albums are not covered in the same way; check Apple's documentation for the current list.
- Copies elsewhere. Photos saved by other apps or older backups are outside its scope.
- Pressure. There's no decoy or duress option.
How to turn it on
- Make sure all your devices run current software.
- Set up a recovery contact or recovery key.
- Go to Settings → [your name] → iCloud → Advanced Data Protection and follow the steps.
Availability varies by country, and Apple's instructions list the requirements.
ADP and VaultBolt together
They solve different problems. ADP keeps your iCloud library private from the cloud. VaultBolt keeps chosen items private from people who can use your phone, removes the copies from your library, and backs up its own encrypted data, which stays ciphertext whether or not ADP is on.
Frequently asked questions
How do I turn on Advanced Data Protection?
Go to Settings, tap your name, then iCloud, Advanced Data Protection. You need a recovery contact or recovery key first.
Do I still need a photo vault with ADP?
ADP protects data in iCloud. A vault protects photos on the phone from people who know your passcode, and adds decoys, duress codes and clean-up.
