Tip: Share content via iCloud on “Advanced data protection”

In your article on the subject of iCloud security, they highlight the end-to-end encryption “extended data protection”. Does the protection also apply if I release individual files with other people via iCloud parts or for processing?

Only if you share content with certain people and all recipients have also activated the “extended data protection” (US concept: Advanced Data Protection), the end-to-end encryption for shared files is retained-however, there are some exceptions (more on this).

In this case, the necessary cryptographic keys are exclusively on the devices of the participants.

Apple emphasizes in the relevant support documents 102651 and 108756that this also applies to released iCloud photo diathencies, entire iCloud drive folder and notes.

However, if a person who does not use the “expanded data protection” is involved, Apple stores the keys for the common content as before on its servers.

In this case, the end-to-end encryption no longer applies.

There are also system -related exceptions in which the encryption generally eliminates as soon as you share data. This includes cooperation on Pages, Numbers and Keynote documents, “shared albums” in the photo app and the public approval via the option “Each with the link”.

When sending as a copy-for example by messenger, email or airdrop-the data on the computer remain at the end-to-end-ended, but you have undermined the encryption yourself by sending an unprotected duplicate.

Regardless, however, you should be aware that you also give control over a document with the approval.

You have no influence on what the recipients do with the data. As soon as you cancel the release, only your own devices have the cryptographic key to decipher the cloud data.