Security Articles

Encrypt iCloud backups using Enhanced Data Protection


Apple's iCloud offers a critical security feature for its users: end-to-end encryption (E2EE). This is crucial for anyone looking to protect their sensitive data from unauthorized access, including from Apple itself. iCloud's implementation of E2EE ensures that data is encrypted directly on the user's Apple device before being uploaded to iCloud. This means that the data can only be decrypted on a trusted device, providing a secure environment for personal information.

E2EE in iCloud is essential for shielding against external threats and maintaining privacy from the service provider, especially in cases of data breaches or unauthorized internal access.

Step-by-Step Guide to Enable End-to-End Encryption


Ensure your Apple device is running the latest version of iOS, as iCloud's enhanced protection features require iOS 13 or later. Most Apple devices released in the past five years should support this.

Steps to Enable iCloud E2EE

To secure your iCloud data with end-to-end encryption, follow these steps:

  1. Access Your iCloud Settings

    • Open the Settings app on your Apple device.
    • Tap on your Apple ID at the top of the screen.
    • Select iCloud.
  2. Locate the Security Settings

    • In the iCloud menu, scroll down to find iCloud Backup.
    • Tap on iCloud Backup to access backup settings.
  3. Enable Advanced Data Protection

    • Navigate to the Advanced Data Protection section.
    • Here, you will find the option to Turn On Advanced Data Protection.
    • Tap the button to proceed.
    • iCloud Settings
  4. Set up Data Recovery

    • At this point you will be alerted to to set up a recovery key.
    • Tap Set Up Account Recovery to continue.
    • iCloud Data Recovery
  5. Record the Recovery Key

    • Tap on Recovery Key to view and record your data recovery key.
    • iCloud Settings

Important to Note

Apple uses AES encryption for iCloud data, with the keys stored in a secure enclave on the user's device, making it virtually impossible for anyone else, including Apple, to access the encrypted data without the device.


When enabling Enhanced Data Protection on Apple's iCloud, you are required to keep a copy of your recovery key. This recovery key will be needed to access your data if your device is ever lost, stolen or malfunctions. Without this recovery key or access to your device, your family and associates will not be able to access your data in the event of your death or incapacitation. It is important to ensure access to your valuable data once you are gone, a fine solution would be to use Keycrypt to securely prepare and distribute physical shares of your 28 character recovery key to family members or business associates.

As we increasingly rely on cloud services, the risk of data breaches and surveillance grows. Using iCloud with end-to-end encryption is an important step towards safeguarding your personal information from these threats.

`iCloud's Advanced Data Protection is a key security feature for Apple users, ensuring sensitive data is protected from unauthorized access, including from Apple itself.'

Share this Article



Secure your Digital Legacy