How standard iCloud protection works
iCloud encrypts data in transit and on Apple’s servers. With standard protection, Apple holds keys for many categories. That helps with account recovery and cross-device features.
The trade-off is that Apple can access those categories. For private photos, backups, notes, or documents, you may prefer a setup where only trusted devices can unlock data. Advanced Data Protection is Apple’s option for that stronger level of privacy.
What changes when you enable ADP
With ADP enabled, most supported categories become end-to-end encrypted. Your trusted devices hold the keys; Apple does not have a copy it can use to decrypt the content.
That includes iCloud Backup, Photos, Notes, and more. A breach of Apple’s systems would not reveal protected content without keys from your devices. ADP puts control over decryption much more fully in your hands.
What ADP does not cover
iCloud Mail, Contacts, and Calendar are not end-to-end encrypted. They need to work with systems outside Apple, so they remain under standard protection.
Some metadata is not covered, and ADP covers iCloud only. Files you share publicly, send to another service, or keep in a different app need their own privacy review.
The trade-off: recovery is your responsibility
Stronger privacy means Apple has less ability to rescue an account if you lose access. Prepare recovery before you turn on ADP.
Choose a recovery contact or create a recovery key that you store safely. Do not keep its only copy on the device it is meant to recover.
If you lose all trusted devices and your recovery method, Apple cannot decrypt protected data for you. Check this setup whenever your devices or trusted relationships change.
How to turn on Advanced Data Protection
On iPhone or iPad, go to Settings, your name, iCloud, Advanced Data Protection. Apple guides you through recovery setup and checks that signed-in devices support it.
Update your devices first. Older unsupported devices may need to be removed. Keep recovery information somewhere safe and reachable.
Where Sealby fits
ADP is a useful upgrade for sensitive iCloud data, but it protects only the categories Apple supports.
Sealby encrypts specific files on your device before you store or share them. An encrypted Sealby file is already unreadable without your unlock secret when it reaches iCloud, whether ADP is on or off.
Enable ADP for broad iCloud protection, then use on-device encryption for the files you want to control most closely.