Apple Gives More Power to Users With End-to-End Encryption

Apple announced that it would offer advanced data protection for iCloud. The new feature uses end-to-end encryption so users can further protect crucial iCloud data. It will be available to U.S. users by the end of the year and the rest of the world by early 2023. 

iCloud already secures 14 sensitive data categories by default, using end-to-end encryption, that includes passwords in iCloud Keychain and Health data. For those who opt-in for the advanced data protection for iCloud, the total number of data categories using end-to-end encryption will extend to 23. The new categories include iCloud Backup, Notes and Photos. 

With this, the only data categories that will not be covered under advanced protection are iCloud Mail, Contacts, and Calendar since there will be a need to interoperate with global email, contacts, and calendar systems. Apple currently has two modes of encrypting data: Standard data protection and Advanced data protection for iCloud. 

Apple is also doubling down on user security with iMessage Contact Key Verification, where users can verify whether they are communicating only with whom they intend to, and Security Keys for Apple ID, which will give users a choice to require a physical security key to log on to their Apple ID account. 

Also Read: Apple’s Privacy Play Lands the Company in Trouble… Again

Users who have enabled iMessage Contact Key Verification will receive immediate alerts if an advanced adversary, such as a state-sponsored attacker, succeeds in penetrating cloud servers and inserting their own device to eavesdrop on these encrypted communications. 

The advanced features come in the background of several reports of data infringement and privacy breaches. In April this year, Pegasus Spyware hacked into iPhones belonging to human rights defenders, lawyers and journalists. The iMessage verification provides additional security to all users against any malware. 

The new developments are reflective of Apple's increasing reliance on private federated learning to strengthen their ecosystem and focus keenly on preserving user data.