The Biggest Security Upgrade Apple Users can Make Today
Advanced Data Protection: Apple's Best Security Tool (and It's Biggest Risks)
The other day I wrote a note telling all Apple users to turn on Advanced Data Protection (ADP).
What ADP is:
ADP is Apple’s strongest form of iCloud security. When enabled, most of your iCloud data (including photos, notes, and backups) is end-to-end encrypted. This means that only you (and those that you authorise) can access it. Not even Apple can help recover it if you lose your keys.
Why it Matters:
Without ADP, Apple still holds the keys to much of your iCloud data, which means governments, hackers, or insiders could theoretically access it. With ADP, those keys belong to you.
However, as was pointed out to me, I left out a few nuances.
For example:
Some countries have banned ADP (the UK most notably).
If you turn on ADP, you must be able to manage the secured keys adequately and never forget your password. Losing it could render all your secured data permanently inaccessible.
Both of these problems are huge.
So while ADP represents one of the most important steps Apple has taken toward real end-to-end encryption, its not a universal solution. Depending on where you live and how confident you are in your own key management, turning it on could either be a strong privacy upgrade or a serious risk.
What are some solutions?
Users in the UK or countries banning ADP:
Some people attempt workarounds (like registering an Apple ID in another country), but these may violate Apple’s terms and are not guaranteed to work long term. I do not recommend this.
The practical alternative is to use third-party end-to-end encrypted services for your most sensitive files, such as Proton Drive, Tresorit, or even self-hosted storage. These don’t depend on Apple’s regional policies.
Best Practices to Avoid Losing Access to ADP:
Set up a recovery contact - a trusted person who can help you regain access if you lose your password.
Generate a recovery key and store it offline in two separate secure physical locations (for example, a safe and a locked cabinet).
Use a reputable password manager to store your iCloud password securely.
Choose a recovery contact who is both technically capable and trustworthy.
Taking all of this into account, here is how to enable ADP:
Update your device - make sure your iPhone, iPad, or Mac is on the latest software version.
Open Settings.
Tap your name at the top to go into Apple ID.
Select iCloud.
Scroll down and choose Advanced Data Protection.
Before enabling it:
Set up a recovery contact - choose a trusted, technically capable person who can help recover the account if you lose your password.
Generate a recovery key - Apple will give you a long string of characters. Write it down and store it offline in at least two separate locations (for example, a safe and a locked cabinet).
Use a password manager - Store your iCloud password securely in a reputable manager so you are not relying on memory alone.
After completing these steps, follow the on-screen prompts to confirm and enable ADP.
Once enabled, most of your iCloud data (backups, photos, notes, etc.) will be end-to-end encrypted.
Final Takeaway
ADP is a powerful tool for taking control of your digital security, but its not a simple toggle that everyone can flip without thought. If you live in a country where it’s unavailable, you’ll need to look at alternatives. If you enable it, you must commit to strong key management practices, or risk losing everything it protects.
In other words ADP isn’t a “set and forget” feature, its a responsibility. Used wisely, it can give you some of the strongest personal data protection available from a mainstream tech company. Used carelessly, it can lock you out of your own digital life.
Authors Note
If you are still reading, thank you. Your support for this newsletter means a lot to me.
I’d love to hear from you: please leave a comment if you’d like clarification on anything I’ve discussed, or if there are specific areas you’d like me to dive deeper into in future posts. Your feedback helps me shape this into something genuinely useful.
And as with all my work, everything I’ve written here reflects my own opinion.
If you found this article valuable, consider sharing it with a colleague or a friend who might benefit from it.