Apple Launches New Data Encryption for iCloud Security

Apple now features new end-to-end encryption for iCloud data, which includes backups, photos, and notes, among others. Advanced Data Protection will make sure that personal data will be secured at all times, even if a threat actor breaches the cloud.

How Does it Work?

An extra layer of security has been added, given that data decryption may only be done using trusted devices. Users will be provided with choices for recovery, which include a personal recovery key, their device's password, or a recovery contact.

Users should note that they need to secure these decryption methods, as Apple does not have other options or decryption keys to recover the data lost. This will apply to message backups, iCloud Drive, Photos, Notes, Reminders, Wallet passes, voice memos, and more.

According to the tech giant's Head of Security in Engineering and Architecture, Advanced Data Protection is the highest level of cloud security Apple can provide. This feature is available for iOS 16.2, iPadOS 16.2, and macOS 13.1. Operating systems before the mentioned three cannot use the security feature anymore.

There are some Apple services that aren't under the new Advanced Data Protection such as iCloud Mail, Contacts, and Calendar. This is due to the services' functions being connected to other emails, contact, and calendar systems, according to Bleeping Computer.

Users can opt out of the new security feature and return to standard data protection at any time. Once they do, their encryption keys will be uploaded to Apple servers. It's only available for select users now, but it will be available in all of the US by late December and for all users by 2023.

There's More

Apple also aims to amp its security up regarding two-factor authentication. Users can now hold hardware keys to unlock their accounts which may start in 2023. This method is already used by some with YubiKeys, which is a USB-C security key. Apple will release this for iCloud as well.

Users may set up their Apple ID account and include a physical key. This will prevent threat actors from accessing the account without the hardware key on hand, which is a solution for the recent data breaches that have been occurring.

Another security measure has also been released by the company, which is the iMessage Contact Key Verification. The iMessage security feature will require the verification of the people that the user is in contact with or detect a third party viewing your messages, according to The Verge.

This can be beneficial for people who are more likely to be targeted by digital threat actors. There are instances when journalists, activists, or politicians have outsiders looking into their conversations, and the feature will prevent that from happening.

For extreme circumstances, users may initiate Lockdown Mode. Apps will no longer function the way they did before. Attachments on messages will be blocked, and links cannot be opened. FaceTime will not work if you have not contacted the person before Lockdown.

Shared albums will be removed from photos, and you will no longer receive Album invitations. If you are to connect your device to an accessory, it needs to be unlocked, and a prompt will appear for approval.