How to Enable Advanced Data Protection (ADP) for iCloud

Did you know that your iCloud photos, notes, backups, and most other data are not end-to-end encrypted by default? Apple offers a feature called Advanced Data Protection (ADP) that lets you change this. In this guide, I’ll walk you through how I enabled it on my MacBook, explain why you should consider turning it on, and highlight the risks you need to be aware of.

What Is Advanced Data Protection?

By default, Apple encrypts your iCloud data — but for many data categories, Apple holds a copy of the encryption key. This means Apple (or a third party in the event of a breach) could technically access your information. When you enable Advanced Data Protection, you switch to full end-to-end encryption for nearly all your iCloud data. Only your trusted devices hold the keys to decrypt your files. Not even Apple can read your data anymore.

Which Data Types Are Protected?

Once ADP is turned on, the following data types are secured with end-to-end encryption:

• Device backups
• Messages backups
• iCloud Drive
• Notes
• Photos
• Reminders
• Safari bookmarks
• Siri Shortcuts
• Voice Memos
• Wallet passes

Some sensitive categories — like your iCloud Keychain passwords and health data — were already end-to-end encrypted before ADP existed. Advanced Data Protection extends that same level of protection to almost everything else stored in iCloud.

Why You Should Enable It

• True end-to-end encryption for iCloud: Your data can only be decrypted on your own trusted Apple devices — nowhere else.
• Protection against cloud breaches: If iCloud servers were ever compromised, your data would remain unreadable to attackers.
• Genuine privacy: No company or government agency can compel Apple to hand over your data, because Apple simply doesn’t have the keys.
• Broad coverage: From photos and notes to full device backups — nearly everything is covered.

The Risks You Need to Know About

There is an important trade-off. Because Apple no longer holds the encryption keys, Apple cannot help you recover your data if you lose access to your account. You are entirely responsible for getting back in. That’s why you must set up at least one of these recovery methods before enabling ADP:

• Recovery contact: A trusted person — at least 16 years old and with an Apple device — who can help you regain access to your account if needed.
• Recovery key: A 28-character code that you need to store somewhere safe (for example, printed out and kept in a safe). If you lose this key and don’t have a recovery contact, your data is gone forever.

Important: If you lose your password, your device passcode, and your recovery method, there is no way back. Your data will be permanently inaccessible.

How to Enable ADP on a Mac: Step by Step

I enabled Advanced Data Protection on my MacBook myself. Here’s exactly how the process went.

Step 1: Open Your iCloud Settings

Open System Settings on your Mac, click your name at the top (Apple ID), then navigate to iCloud. Scroll down until you find Advanced Data Protection and click Turn On.

Step 2: Set Up a Recovery Contact

Apple will prompt you to add an account recovery contact. This should be someone you trust — a friend or family member who owns an Apple device and is at least 16 years old. If you prefer, you can skip this and use a recovery key instead, but I strongly recommend setting up at least one recovery method.

Step 3: Confirm and Wait

After configuring your recovery method, the activation process begins. You’ll see a screen with a padlock icon and a message saying the feature is being enabled. Be patient — depending on how much data you have in iCloud, this can take a few minutes.

Step 4: Done!

Once the process completes, your iCloud data is protected with end-to-end encryption. You can verify that ADP is active by going back to your iCloud settings, where you’ll see an overview of all the data types that are now encrypted.

Requirements

Before you can enable Advanced Data Protection, make sure you meet the following requirements:

• Two-factor authentication must be enabled for your Apple ID.
• All your Apple devices must be updated to the latest software (iOS 16.2, iPadOS 16.2, macOS 13.1, or later).
• You need to configure at least one recovery method (recovery contact or recovery key).
• Any devices that don’t support ADP may need to be removed from your iCloud account.

Disclaimer

Enabling Advanced Data Protection is done at your own risk. Make sure you store your recovery method(s) safely. If you lose access to your account without a recovery contact or recovery key, no one — not even Apple — can restore your data. If you’re unsure whether ADP is right for you, reach out to Apple Support before turning it on.

Final Thoughts

Advanced Data Protection is one of the most meaningful privacy features Apple has introduced in recent years. It gives you full end-to-end encryption across nearly all your iCloud data — something that surprisingly isn’t turned on by default. The setup only takes a few minutes, but don’t skip the recovery step. As long as you have a trusted recovery contact or a safely stored recovery key, you can enjoy true peace of mind knowing your data is yours alone.