Is iCloud Photos end-to-end encrypted?

“Encrypted” can mean two different things. Either the cloud company holds the keys, or only your own devices do. iCloud Photos does the first by default and the second only after you change a setting. This guide explains both modes, how to switch, and what stays outside end-to-end encryption either way. We checked each claim against Apple’s support pages and the Apple Platform Security guide on 2026-10-06.

Standard data protection or Advanced Data Protection?

Every Apple Account starts with standard data protection. Advanced Data Protection is an option you turn on.

	Standard data protection	Advanced Data Protection
Photos	Encrypted in transit and on the server	End-to-end encrypted
Who holds the Photos keys	Apple	Your trusted devices
iCloud Backup	Apple holds the keys	End-to-end encrypted
Shared Albums in Photos	Standard protection	Standard protection
iCloud Shared Photo Library	Not end to end	End to end if every participant has it on
iCloud.com access	On	Off until you turn it on
Account recovery	Apple can help	Only your own recovery methods

Apple’s overview lists 15 data categories that are end-to-end encrypted by default, such as passwords and Health data. Photos is not one of them. Advanced Data Protection raises the count to 25, and Photos joins the list.

What standard data protection means

Apple says your iCloud data “is encrypted in transit and stored in an encrypted format at rest.” The keys sit in Apple data centers. So Apple can decrypt your photos when you need help. Apple names 3 cases: when you sign in on a new device, restore from a backup, or recover your data after a forgotten password.

That design has a clear benefit. If you forget your password, you can still get your photos back. It also means the photos are readable by Apple, and by anyone Apple must give them to.

What Advanced Data Protection changes

With Advanced Data Protection on, Apple says your trusted devices keep “sole access to the encryption keys for the majority of your iCloud data”. The Apple Platform Security guide explains how. Your device deletes the service keys that Apple stored in its hardware security modules. Apple calls that deletion “immediate, permanent, and irrevocable”. Your device then makes new keys that Apple never sees.

Two other effects follow:

• iCloud.com turns off. Web access to your data stops. If you turn it back on, a trusted device must approve each web sign-in.
• App data in iCloud gets the same protection. Apple says third-party app data in iCloud Backup, and CloudKit encrypted fields and assets, become end-to-end encrypted.

How to turn on Advanced Data Protection

What you need first

• An Apple Account with two-factor authentication.
• A passcode or password on your device.
• Current software on every device signed in to your account. Apple lists iOS 16.2, iPadOS 16.2, macOS 13.1, watchOS 9.2, tvOS 16.2 and iCloud for Windows 14.1, or later.
• At least one recovery method: a recovery contact or a recovery key.

Apple says Managed Apple Accounts and child accounts cannot use it. If an old device blocks the switch, you can remove that device from your account and try again.

A recovery contact is a person you trust. They get no access to your account, only a code that helps you get back in. A recovery key is a 28-character code. Apple says you use it with a trusted phone number and an Apple device.

Turn it on

1. Update every device signed in to your Apple Account.
2. Open the Settings app, tap your name, then tap iCloud.
3. Scroll down, tap Advanced Data Protection, then tap Turn on Advanced Data Protection.
4. If you have no recovery method yet, tap Account Recovery, then Set Up Account Recovery, and follow the steps.
5. Follow the onscreen instructions to review your recovery methods and turn it on.

On a Mac, choose Apple menu, then System Settings. Click your name, click iCloud, click Advanced Data Protection, then click Turn On. Apple says that turning it on from one device turns it on for your whole account.

To turn it off, go to the same screen. Your device uploads the keys to Apple again, and your account returns to standard data protection.

Not available for new users in the UK

In 2025, Apple stopped offering Advanced Data Protection to new users in the United Kingdom. For UK users who did not turn it on before, Photos stays under standard data protection. Apple says the feature is still available everywhere else.

What stays outside end-to-end encryption

Advanced Data Protection does not cover everything about your photos. Apple lists these gaps:

• Shared Albums. Apple says “Photos added to Shared Albums are stored with standard data protection, as the feature permits albums to be publicly shared on the web.”
• Links for anyone. Content you share with “anyone with the link” stays under standard protection.
• Shared Library with a mixed group. iCloud Shared Photo Library stays end to end only if every participant has Advanced Data Protection on.
• Photo details. Apple keeps a key for some metadata. For Photos, the list includes the checksum of each photo, when it was taken and imported, how many times you viewed it, and “Whether an item has been marked as a favorite, hidden, or marked as deleted.”
• Sharing previews. To start a share, Apple receives the names and Apple Accounts of the participants. It may also store a title and a thumbnail to show a preview.
• Web sessions. When you open Photos on iCloud.com, your device gives Apple temporary keys for that type of data. A notification on your device tells you when this happens.

Does encryption keep photos private at home?

Not by itself. End-to-end encryption protects photos on Apple’s servers. It does not protect them on your own devices. Anyone who can unlock your iPhone can open Photos, and the device passcode also opens the Hidden album. Our Hidden album guide covers that lock.

The same holds for your Apple Account. A person who knows your sign-in can add a trusted device. On a shared family account, every device already has your photos. See our guide to moving photos off a shared Apple ID. For hidden photos in particular, read are hidden photos saved to iCloud.

What York Vault does

York Vault is on the App Store for iPhone and iPad and on Google Play for Android. It encrypts every item on your phone before the item goes anywhere. It does not depend on Advanced Data Protection.

• One key per item. Each photo, video and file gets its own random 256-bit key. AES-256-GCM seals the content. York Vault also encrypts file names, dates, places and thumbnails. See end-to-end encryption.
• Backup that arrives encrypted. The free backup goes to the private part of your own iCloud, or to your own Google Drive on Android. Apple and Google store only encrypted data. See encrypted backup.
• No key with us. We have no copy of your keys, so we cannot open your items or reset your code. See what we can and cannot see.
• A recovery key you hold. Setup gives you 12 words. They restore your library on a new phone if you forget your code. See recovery key.
• Shared albums stay end to end. In Pro, a shared album uses a group key that only its members hold. See shared albums.

Download York Vault on the App Store, or on Google Play. See pricing for what each plan adds.