Hidy VaultEnd-to-end encryption for photos on iPhone
iCloud Photos is not end-to-end encrypted by default. Turning on Advanced Data Protection in iCloud settings adds end-to-end encryption to Photos, along with most other iCloud data. It needs two-factor authentication, updated software, and a recovery method.
- Default: Standard Data Protection is on; iCloud Photos is not end-to-end encrypted.
- Turn on: Settings > [your name] > iCloud > Advanced Data Protection.
- Needs: two-factor authentication, a device passcode, updated software, and a recovery key or contact.
Are iPhone photos end-to-end encrypted by default?
No. Apple says Standard Data Protection is the default for iCloud. Under that default, iCloud data is encrypted, but Apple holds the keys in its data centers so it can help with recovery. Only certain categories are end-to-end encrypted by default, and iCloud Photos is not one of them.
Advanced Data Protection is the optional setting that changes this. Apple lists Photos among the iCloud categories it covers with end-to-end encryption. With it on, Apple says protected data can be decrypted only on your trusted devices, and Apple cannot access it.
This guide covers what the setting does for photos, how to turn it on, and what it does not protect.
What Advanced Data Protection does for photos
Advanced Data Protection applies to your whole Apple Account, not just one device. Turning it on from one device enables it for the account and for compatible devices signed in to that account.
For photos, the main effect is on iCloud Photos. Apple lists Photos as one of the categories protected with end-to-end encryption under Advanced Data Protection. The keys stay on your trusted devices, not in Apple data centers.
That is a meaningful change from the default. It means the copy of your photo library stored in iCloud is protected in a way that Apple says it cannot read.
Hidy Vault keeps photos, videos and documents in encrypted vaults that open only with a pattern you draw. No account, no Hidy server. Free for 3 vaults.
How to turn on end-to-end encryption for iCloud Photos
- Update your iPhone to iOS 16.2 or later. Advanced Data Protection requires it.
- Check that other devices signed in to your Apple Account also run compatible, updated software.
- Open Settings, tap your name, then tap iCloud.
- Tap Advanced Data Protection, then tap Turn On Advanced Data Protection.
- If prompted, choose Account Recovery and set up a Recovery Contact or Recovery Key.
- Follow the onscreen instructions to finish.
Apple says you need two-factor authentication, a device passcode or password, and at least one recovery method before you can turn it on. If one of your devices cannot meet the software requirement, you may need to update it or sign it out first.
What you need before you turn it on
- Two-factor authentication on your Apple Account.
- A device passcode or password on your devices.
- Compatible, updated software on every device signed in to your Apple Account.
- A Recovery Contact or Recovery Key, set up before you enable the feature.
These are not optional. Apple requires them because losing access to your trusted devices without a recovery method would mean losing access to your data.
What it does not protect
Advanced Data Protection is strong, but it is not a blanket over everything you do with photos. Apple names some clear exceptions.
- Shared Albums are not end-to-end encrypted, even with Advanced Data Protection on.
- "Anyone with the link" sharing is not end-to-end encrypted.
- iCloud Shared Photo Library is end-to-end encrypted only if every participant uses Advanced Data Protection.
Apple also says iCloud.com web access is disabled by default when Advanced Data Protection is on. That is a trade-off: more protection, less web convenience.
And the setting protects data in iCloud. It does not change what someone sees if they pick up your unlocked iPhone and open the Photos app.
What happens if you turn it off
Apple says that if you turn off Advanced Data Protection, your iCloud data returns to the standard level of security. In practice, that means Photos is no longer end-to-end encrypted.
You can turn it back on later, but you will need to meet the same requirements again, including a recovery method.
Advanced Data Protection vs a vault app
These two tools solve different problems, and they can work together.
| Advanced Data Protection | Hidy Vault | |
|---|---|---|
| What it protects | iCloud data, including iCloud Photos | Files stored inside the app on the iPhone |
| Where keys live | On your trusted devices | Derived from your pattern plus a device secret in the iPhone Keychain |
| Encryption | Apple's iCloud encryption, end-to-end for covered categories | AES-256-GCM for file contents, names, thumbnails, folders and notes |
| Locks when you leave the app | Not applicable | Yes, as soon as the app goes to the background |
| Visible in Photos app | Yes, photos remain in your library | Not stated |
Advanced Data Protection protects your iCloud copy. It does not hide photos from someone holding your unlocked phone. Hidy Vault keeps files out of the Photos library and locks when the app goes to the background. It is coming to the App Store.
If your concern is someone scrolling your camera roll, a vault addresses that. If your concern is the iCloud copy, Advanced Data Protection addresses that. Many people want both.
Limits worth knowing
- Advanced Data Protection is account-wide. You cannot turn it on for Photos only.
- It requires updated software on all signed-in devices. An old iPad can block you until you update it or sign it out.
- Shared Albums stay outside end-to-end encryption even with the setting on.
- Hidy Vault has no independent cryptographic audit yet. Its encryption is real, but it has not been reviewed by an outside firm.
- Hidy cannot reset a forgotten vault pattern. The recovery phrase is the way back in.
For the iCloud side, start with Apple's iCloud data security overview and the Advanced Data Protection page. For the on-device side, see how Hidy's pattern encryption works.
Frequently asked questions
Are my iPhone photos end-to-end encrypted by default?
No. Apple says Standard Data Protection is the default, and iCloud Photos is not in the set of categories that are end-to-end encrypted by default. Advanced Data Protection adds end-to-end encryption to Photos and most other iCloud data.
Does Advanced Data Protection cover photos I share in Shared Albums?
No. Apple says Shared Albums and "anyone with the link" sharing are not end-to-end encrypted, even with Advanced Data Protection on. iCloud Shared Photo Library is end-to-end encrypted if every participant uses Advanced Data Protection.
What happens if I turn Advanced Data Protection off?
Apple says your iCloud data returns to the standard level of security. That means Photos is no longer end-to-end encrypted.
Can I turn on Advanced Data Protection on an older iPhone?
It requires iOS 16.2 or later. All devices signed in to your Apple Account need compatible, updated software. If one device cannot meet the requirement, you may need to update it or sign it out first.
Do I still need a vault app if I use Advanced Data Protection?
They solve different problems. Advanced Data Protection protects iCloud data with end-to-end encryption. A vault app like Hidy Vault encrypts files on the iPhone before they are stored, and it locks when the app goes to the background.
