Introduction to Apple’s iCloud Security Feature

On Friday, Apple announced that it will no longer offer a security feature allowing users in the United Kingdom to encrypt their iCloud data, citing unforeseen circumstances.

Statement from Apple

According to a statement provided to TechCrunch by Apple spokesperson Fred Sainz, the company’s Advanced Data Protection feature will be unavailable to new users, and existing U.K. users will eventually have to disable this security feature. The decision has sparked widespread concern among users and privacy advocates.

Concerns Over Data Protection

Apple expressed disappointment that the protections provided by Advanced Data Protection will not be available to its customers in the U.K., given the increasing threats to customer privacy and data breaches. The company emphasized that enhancing the security of cloud storage with end-to-end encryption is more urgent than ever before.

The company’s statement highlights the need for robust security measures to protect user data, and the inability to offer Advanced Data Protection in the U.K. is a significant setback for users who rely on this feature to secure their data.

Image of Disabled Advanced Data Protection

Background on Advanced Data Protection

The announcement comes after the U.K. government reportedly ordered Apple to create a backdoor that would allow British authorities to access users’ encrypted data stored on Apple’s cloud servers. This move has been met with criticism from privacy and security experts, who argue that it sets a dangerous precedent for authoritarian countries to follow.

Advanced Data Protection allows users to turn on end-to-end encrypted iCloud backups, making it impossible for anyone, including Apple and government authorities, to view the data stored in iCloud by users who have opted-in.

Reactions from Experts and Authorities

A spokesperson for the U.K. Home Office did not immediately respond to TechCrunch’s request for comment. Apple did not provide details on how the process of disabling Advanced Data Protection will work for users who had already turned it on before Friday.

James Baker, from the U.K. digital rights organization Open Rights Group, expressed concern that the Home Office’s actions have deprived millions of Britons of accessing a security feature, putting them at higher risk of their personal data and family photos falling into the wrong hands.

Impact on Users

Apple clarified that certain types of data, including health data, messages stored in iCloud, and payment information, which are end-to-end encrypted by default for all users, will not be affected by this change. However, U.K. users will not be able to opt-in to use end-to-end encryption for other types of data, such as photos, notes, backups, and other data, which were previously encrypted under Advanced Data Protection.

For users who already have Advanced Data Protection enabled, Apple will provide guidance and a period of time to disable the feature to continue using iCloud. The company emphasized that Advanced Data Protection is unaffected for users outside of the United Kingdom and that end-to-end encrypted communication services like FaceTime and iMessage are not affected.

Apple’s Commitment to Security

Apple reiterated its commitment to security, stating that it has never built a backdoor or master key to any of its products or services and never will. The company linked to its prior statements on the matter, emphasizing its dedication to protecting user data.

Reaction from Experts

BBC News reported that Advanced Data Protection stopped being an option for new users starting at 3 p.m. U.K. time on Friday. TechCrunch confirmed that Advanced Data Protection is no longer an option for new users in the United Kingdom.

Matthew Green, a cryptography expert and teacher at Johns Hopkins University, advised users outside of the U.K. to turn on Advanced Data Protection, emphasizing that the more people who use it, the harder it will be to shut off this way.

Conclusion

The decision to disable Advanced Data Protection in the U.K. has significant implications for users who rely on this feature to secure their data. As the debate around encryption and data protection continues, it is essential to prioritize user security and privacy.

This story was updated to include the statement from James Baker and to clarify the forms of data protected under Advanced Data Protection.