A Comprehensive Guide to Apple’s Encryption Changes in the UK

0
33
A Comprehensive Guide to Apple’s Encryption Changes in the UK

Apple has announced the discontinuation of its Advanced Data Protection feature in the UK. This choice follows an order from the UK government demanding that Apple create a global backdoor for iCloud encryption. Rather than comply with this directive, Apple opted to eliminate the feature within the UK.

A significant nuance is often overlooked in many reports regarding this announcement. Although Apple is removing the Advanced Data Protection feature, it is not withdrawing “end-to-end encryption” from the UK. The feature is distinct from Apple’s overall end-to-end encryption initiatives.

iCloud, by default, provides end-to-end encryption for 15 distinct data categories.

In December 2022, Apple introduced Advanced Data Protection as an additional, optional way for users to secure more categories of iCloud data. By choosing to participate in Advanced Data Protection, users could extend end-to-end encryption to more data categories. However, it’s these extra categories that will no longer have that protection in the UK due to Apple’s removal of Advanced Data Protection.

This indicates that the following iCloud data categories will lack end-to-end encryption protections in the UK:

  • iCloud Backup
  • iCloud Drive
  • Photos
  • Notes
  • Reminders
  • Safari Bookmarks
  • Siri Shortcuts
  • Voice Memos
  • Wallet Passes
  • Freeform

Therefore, these categories will revert to standard data protection, just as they were before the introduction of Advanced Data Protection in December 2022.

Apple describes standard data protection as follows:

Standard data protection is the default setting for your account. Your iCloud data is encrypted during transmission and stored in an encrypted format at rest. The encryption keys from your trusted devices are safeguarded in Apple data centers, enabling Apple to decrypt your data on your behalf whenever needed, such as signing in on a new device, restoring from a backup, or recovering data after a forgotten password. As long as you successfully log into your Apple Account, you can access your backups, photos, documents, notes, and more.

What’s still end-to-end encrypted in the UK?

What will not change with Apple’s decision to remove Advanced Data Protection from the UK is the end-to-end encryption for the initial 15 iCloud data categories. This means the following iCloud data categories remain protected by end-to-end encryption by default for all UK users:

  1. Passwords and Keychain
  2. Health data
  3. Journal data
  4. Home data
  5. Messages in iCloud
  6. Payment information
  7. Apple Card transactions
  8. Maps
  9. QuickType Keyboard learned vocabulary
  10. Safari
  11. Screen Time
  12. Siri information
  13. Wi-Fi passwords
  14. W1 and H1 Bluetooth keys
  15. Memoji

Notably, many crucial categories remain on that list and continue to be safeguarded by end-to-end encryption, such as Health data, passwords, and Messages in iCloud. Additionally, Apple’s communication services, including iMessage and FaceTime, will continue to provide full end-to-end encryption.

Lastly, it is essential to recognize that many Apple users in the UK likely never opted into Advanced Data Protection initially. This feature has always been an optional setting for individuals seeking an extra security measure.

Apple also mentions that users who previously opted into Advanced Data Protection will need to disable it to regain access to their iCloud account. The company has stated that more information on this process will be shared in the future.

Follow Chance: Threads, Bluesky, Instagram, and Mastodon.