Security Setting EVERY Apple User Needs to Fix (Tutorial)
With iOS 16.2, Apple has introduced their new "Advanced Data Protection" feature, which is just a fancy way of saying a more encrypted iCloud. Learn what this means for you and get a step-by-step tutorial for how you can turn it on for your own iPhone or Mac.
If you care about your personal security and privacy online, download my free security checklist here:
✅ Security Checklist: www.allthingssecured.com/secu...
🔹🔹🔹What You Should Watch Next🔹🔹🔹
We've got a lot of great privacy- and security-related content here on the All Things Secured KZhead channel (although we admit we're a bit biased). If you're wanting to increase your online cybersecurity, here's what's next:
✅ Change these 7 Facebook Privacy Settings NOW! • How to Change Your Fac...
✅ STOP Using VPNs! (here's why): • Don't Use a VPN...it's...
✅ Are spy apps safe? • DON'T USE MOBILE SPY A...
🔹🔹🔹Help Support All Things Secured (Recommended Services)🔹🔹🔹
If you enjoy this kind of practical security and privacy content, one of the best ways you can help support this channel is by using these affiliate links to our favorite products and services. When purchasing through these links, you not only get the best available deal, the companies will also pay us a small commission. Thank you for your support!
✅ Recommended Password Manager: www.allthingssecured.com/yt/1...
✅ Recommended Identity Monitoring: www.allthingssecured.com/try/...
✅ Recommended 2FA Security Key: www.allthingssecured.com/yt/y...
✅ Recommended Secure Email: www.allthingssecured.com/try/...
✅ Recommended VPN: www.allthingssecured.com/try/...
*********************
Video Timestamps
*********************
0:00 - Introduction to End-to-End Encryption
0:56 - Understanding Encryption
2:20 - What Data Apple Does and Doesn't Encrypt
4:15 - How to Turn on Advanced Data Protection (tutorial)
6:42 - Why NOT to Turn on this Feature?
*********************
Up until recently, Apple had the key to much of the data that we stored from our iPhone and Mac in the iCloud. Now that they have given us the ability to turn on encryption via Advanced Data Protection, it's up to you to take the necessary steps to make that happen.
#cybersecurity #mobilesecurity #encryption
Are you going to turn on Advanced Data Protection for your iCloud account? Leave a comment below to let me know if this was helpful!
What's the best antivirus or anti malware to get to prevent spyware and stalker ware from getting on your device in the first place. And remove it If you have it. I know you said cert in one video. But what antivirus can you use to prevent it from happening in the first place. And Certos just for iPhone, what about Mac and laptops. What's the best antivirus for those.
No, because ios 16 isn't available for the iPhone 7+ 🤡
Yes
Of course mate. Hopefully we can scan the iPhone with Norton, though. iOS 17 is going to be a lotto win for hackers (side loading)
Yup, and some other security features now available.
The hotel analogy was great thanks
I haven’t even watched a video and I gave it away just because you’re covering topic. I wanted a simple easy explanation of this. I was aware it was available and haven’t taken the time to figure it out. Thank you for the video.
Thank you for this common sense explanation of the pros and cons of this addition step.
I bet SOOOO many people end up locking themselves out of their accounts with this. I get why Apple allows it. I understand why people should use it, but most people don't even know how to manage their simple 8 digit password, much less a password, a pin code and keeping track of a 28 character key.... I would advise that only with extensive data protection knowledge, do this. Don't go to mom's house and encrypt her phone and lose all her stuff.
As long as someone is on their devices nothing is wrong. Adding a new device is simple as well if you do what you should do and activate the new one before wiping the old device.
@@brandonw1604 what does that have to do with my comment or even the video?
@@mgaming7 people locking themselves out…
I’m pretty well-versed in this area but changed my iPhone passcode to a more secure alphanumeric one and then managed to forget it the following morning before I got to writing it down (this is unlike me). Thank God I had a recovery contact because otherwise from that one simple error, I was locked out of not only my phone, but my iCloud account and even upon restoring my phone, would have been locked out from recovering it…. despite having all my (other) passwords, pins, security keys, etc. 💀💀💀
Pro tip: generate a recovery key, print a physical copy of it (paper), leave it in the phone's box. Also make at least 2 or 3 backups and store it locally or cloud
Just an FYI to anyone who might not know, recovery contacts only works if the other person is using an Apple product too.
That’s a good point.
Great stuff. Thank you.
Thanks I wish I knew this sooner
Helo and Thanks for the explanation. Could you please tell me if screen sharing through iMessage from Mac to Mac is encrypted? Thanks 😊
Dude.... you're good. Informative .... excellent delivery.
Glad it was helpful!
Once it comes to my country I'll definitely be turning it on. Some privacy advocates are still advocating alternative places to store your data - is that just an extreme privacy measure? Or is there another reason? (I know Apple tracks telemetry so it could just be that.)
Great review however, I've got one question. Those using Windows and subscribed to iCloud are they able to use and setup the Advanced Data Protection via the browser or the dedicated iCloud Windows app? Been contemplating of getting iCloud mainly, because of the E2EE protection over other cloud services. Tks.
Would you recommend keeping your encryption passkey in 1Password? If so, since it’s not really a login, would you keep it in the secure notes category or would you keep it in the login category? Thanks
great tuto easy peasy 👍
good video, do i need to turn this ON even i don’t have icloud? i use my computer as a back up not on icloud.
Great video. Onze question: im running a apple Familiy Construction in oud household. If i encrypt my personal data would i be able to still have shared notes and pages documents wint my spouse? It recon you lose that functionality also?
Good practical advise.
I hope you’re able to make good use of it.
Thanks for a very clear video. I do have another question. If I lose access to all my Apple devices, let say from fire or otherwise destroyed, can I still access iCloud from a web browser ? Is the problem the fact that because I don't have any devices I won't have any means to access 2FA and therefore I will need a recovery key from a trusted contact (previously set up) or fill in the long recovery key ?
nice meet you josh..please handle this problem all scam from setting system
Just an FYI to anyone with an older device on your iCloud account that isn't compatible with Advanced Data Encryption, if you remove that device from your iCloud and enable encryption on your iCloud there is a very good chance you will NOT be able to re-add that device if you turn the encryption off. Apple instructions on disabling the Advanced Data Encryption imply that older devices can be on your account if the encryption is off, however I am now locked out of my iCloud account on my Mac Mini late 2014 even with the data encryption off. I removed it from my iCloud during the process of enabling the data encryption so maybe if you remove the older device prior to beginning the process it would be OK but I can't verify that would work either.
Thoughts on samsung message guard ? How do you protect from pegasus?
ADP not available in UK yet. Thanks anyway - will update when it is.
Thanks!
Thank you!! 🙏
Hotel room is a very go analogy. I would add that with the vault items that a lost key the items are lost forever... suggest everything in the vault is automatically destroyed when you check out.
Great info thanks !
My pleasure 😇
This is really useful knowledge for Apple fans and any Apple fans who want to impress their fellow Apple fans at a dinner party 😅
Advanced Data Protection was enabled in the UK on iOS 16.3. I am guessing that includes some other countries.
I’m pretty illiterate with this stuff so pardon me if this is a stupid question lol, is Advanced Data Protection, and linking your iPhone with a Yubico security key pretty much a mutually exclusive security move, or would you actually want to do both? Thanks.
Hi Josh. Good to have you in 2023
Thanks so much!
Save everything to the pc then to a ext external hard drive then unplug it after it’s all saved that will work too
What's the best antivirus or anti malware to get to prevent spyware and stalker ware from getting on your device in the first place. And remove it If you have it. I know you said cert in one video. But what antivirus can you use to prevent it from happening in the first place. And Certos just for iPhone, what about Mac and laptops. What's the best antivirus for those.
How secure would my iPhone be if I enabled both this and lockdown mode?
Before I go through the setup process I was wondering if the recovery key had to be 28 characters long? I’d like to use a variation of a different recovery key that I use which is 20 characters long. Am I correct that turning this on encrypts my notes and my photos, and nothing else? Thanks
yay, Not available in my country which is Canada. But thanks for the info. I'll turn it when "they" let me😒
Noticed you didn’t use Apple Mail or Calendar. Wondering what do you use for email and calendar?
@All Things Secured, I don't know much about computers and that's why I subscribed to your channel. Therefore, I have a question for you: Do you recommend switching on "Access iCloud Data On The Web" under iCloud settings on my Mac? Furthermore, can you explain the securities pros and cons of turning this feature on? Maybe you should consider doing a video about this for beginners like myself.
He doesn’t care.
If you have recovery key turned on, does Apple still let you use a recovery contact or is it completely blocked off like how Security Keys block off 2fa push notification Trusted Device codes?
This feature is still not available in Latin America, but I will use it once it is offered to us down here. Thanks for the clear explanation and instructions!
My pleasure, Fabio!
Update: The feature is available now and I tried to use it, but the iCloud app in Windows stopped working for me… A shame, I rely on it. I had to turn the feature off to make the app work again in Windows.
So I'm curious is it at all possible for a recovery contact to be social engineered to get into a apple account sir?
I was thinking about turning this on, but for right now I'll off on doing that
Is our data in hide my email encrypted? Will the forwarding email addresses be encrypted? Will it be classed as a contact and therefore not encrypted? If it is, then it can be a good way of generating alias
could this encryption app eventually cause my phone to go into SOS only when my prepaid at&t minutes expire? and what happens if i turn it off and i forgot my key but i do have a backup contact set up. i don’t remember setting this up and if i have other devices linked to it, 1) my lenovo laptop is apparantly corrupted and i also had microsoft onedrive app on this phone, which i believe has corrupted files on it. what can i do?
I’ve been programming encryption and using encrypted systems since it was command-line interface only. Since PGP went GUI encryption for the masses has never been so user friendly. And BB OS was awesome requiring very little tweaking to create an impenetrable communication system. On my iPhone 11 Pro Max and iPad Pro (2nd Gen.) 12.9” I’ve denied applications access and turned Seri completely off ..etc. QUESTION: Why is it that in Canada the Advanced Data Protection is not available as yet? Keep preaching bro!
Thanks, Phil! I’m not sure why, except perhaps they’re using the US to test everything before rolling it out globally?
Would be curious to know what email and calendar provider:service you are using as your everyday.
As regards email, he mentioned that he uses Protonmail.
Where do y’all store the 28 character recovery key?
Not yet on some country
The obstacle I face when attempting to enable this is a Macbook whose OS cannot be updated to a version that is suitable for Advanced Data Protection. I'll prolly have to create a new iCloud account for it as I can think of no other way around it.
I have an issue with my Yubikeys 5c usb c my MacBook does not recognize them.
Thank you for the information, but I did the protection feature provided for the data, then recover the account, then the recovery key, which consists of 28 characters. After what I did, I went to format the iPhone, and after formatting it, I want to return the data to the iPhone. The device cancels this feature
ADP … if iCloud was a far more stable system I would agree. As a multiple OS user, the iCloud is a poor option. Fix the iCloud and fix the Passkey issue. Maybe then it will be a better option.
It's not available in the UK
Would love a tutorial on apple account recovery using a trusted contact as I'm curious if there is any vulnerabilities in letting a recovery contact be able to recover your account?
What mail service do you like to use ?
Is this something I need to bother with if I've turned all the iCloud settings off?
I’m tempted and I am into privacy as a right etc but I have not bothered too I am more concerned losing all my data and losing my keys to the data
What apps do you use that are Not protected by advanced security features?
I believe my phone has been “cloaned” or as I was told someone made a ghost phone of mine! It all has sent me through an emotional roller coaster! How can I find out who may have done so or what can I do to fix this problem? Is it possible for me undo? I hope u can help me get piece of mind again!
I’m in the US and have been getting a “Something Went Wrong: There was a problem turning on Advanced Data Protection. Try again later.” Since the initial release. Does anyone know how to fix this?
great info but I just found out this feature on available in the US. Apple help desk said they didn't know when it would be available outside the US. Maybe a follow-up reminder when you learn it is available worldwide. I live in Australia. Your content and info is A+
Yea, I didn't realize that when I first published this, but I know that it's coming!
Thank you very much
i tried turning this on last year after my phone updated and it said i had to wait for a certain date like march or february of this year im in the US.
I’m on ios 15. Not gonna update since I don’t use icloud anyway.
Advanced Data Protection is NOT yet available in your Country or region --> BRAZIL :(
If I turn it on then I can’t sign into my I cloud on my 2017 Mac book air
you can make it happened if one of you machines have older os like Monterey
I would turn it on, but it is not available in Australia yet.
Not yet. But coming.
Can this keep plaid away from entering our banks since we connect our bank via plaid . Crypto purchasing for example
No, these are different. The only way to keep Plaid away from your bank is to stop using services that connect via Plaid.
Another reason not to turn it on: In addition to a relatively new Mac Mini, I also have an old 2011 MacBook Pro. It can’t be updated anywhere near the latest OS, therefore I can’t do the step you described in the video making your other devices compatible. And I don’t want to remove that old MacBook from my account, it’s a little slow but is otherwise fine. So no new improved security for me until that device finally craps out.
I’m in the same situation. I turned it on for my iPhone but I had to take my old iMac off line with Apple. It’s a little frustrating since they don’t sync anymore nor can I connect to the App Store etc. But I’m looking to get a new iMac very soon so I’m just dealing with the inconvenience.
Yea, I hadn’t considered that, but you’re exactly right.
Can we also backup to external hard drive?🤔
Backup what data?
all of it Doc's fotos etc. as we do time machine, I have 2 H drives@@AllThingsSecured
You really could have " cut to the case" as thay say raster...is this vanity on your part. Love seeing yourself on some utube vidio , it's very theatrical !
And there were no problems afterwards? Is navigating trough Apple Photos still as fast as before? Can you still search for photo shoot locations etc? I had 42,000 photos and videos on Google Photos and I'm currently testing Ente Photos with E2EE. Many things are more difficult to develop, if you're using E2EE. With Google Photos you can search for "food" and will only get photos with "food" on them. How about Apple Photos? Just for my own interest.
I haven’t noticed any change in speed or search so far, but I don’t have as many photos as you do.
I have around 60,000 photos and videos in Apple Photos/iCloud. ADP has no impact on performance that I can discern. I recommend Adobe Lightroom Classic if you’re serious about managing and working with large photo collections not Apple Photos/iCloud.
@@frankfurter7260 Apple still doesn't encrypt several meta data of photos, videos and some more things. So it's no surprise, that things like the search dunction is still quick. For me, not encrypring the meta data is a no go. I use and will still use alternatives to the iCloud. Yes, using Lightroom classic locally is one good alternative.
Wait... what does the policy print say about E2E encryption _if you don't pay._ If you forget to pay for iCloud or overdraft on the storage, then what?
I’m sure it’s the same as if you fill up your iCloud and then stop paying. You don’t lose the data, you simply can no longer add to it or really update the data.
my device is updated and I did't find it. maybe it's not available for all countries.
I have a new iPhone getting delivered next week by doing this when I transfer everything to the new iPhone will all my apps already be logged in? I know all my passwords but I have one app purple player which is logged in using a friends details but I won't be able to ask my friend to re log in as we have fallen out
No, you will likely be logged out of all apps when you move to a new phone.
Gotta wait for that "early 2023" in my country. However among the EU my country is one of the first to get these updates.
Sorry about that. When it comes, make sure you do it!
I won't activate it because I don't want to remove old devices from my ID list. I love to see my huge amount of products going back some years.
Probably early February
it says Advanced Data Protection is not yet available in my region so unfortunately I have to wait :(
Hopefully not a long wait 🙏
currently only available in USA unless it’s a new Apple device until February 2023 - just in case, people locked themselves without a recovery key or contract. Should be rolled out globally in early 2023. Btw, I’m in Australia and it’s not available here yet too.
Full End-End encryption Does not work if you use iCloud for Windows.
Me being old school and having enough problems with having to use so many special passwords this is a no option for me.
Considering
I don't have an Apple device any more. It was stolen last year. I checked to see whether someone found it, but everyone I spoke with at the market, the post office, the laundromat, the pharmacy, and the coffee shop said no, they didn't have it. It had my Bar Association courses on it.
I have no idea what I’m doing wrong; I re-enter the entire recovery key EXACTLY and it says the key is incorrect…….even when I can see it’s identical 🤔
Does Google offer anything like this?
Not that I’m aware of.
Not available in my country.
Hopefully soon.
Don’t want to enable 2FA so no go for me.
I set this up weeks ago and it didn’t take very long. I’m going to add you as a trusted recovery contact so please accept the modest assignment. I do not recommend it to my folks or some friends because I know they will lose their iCloud password and I don’t want to be blamed when they lose access to all their info and the recovery contact process fails.
Congrats on getting it set up!
If someone observes you entering your PIN code to unlock your phone, steals the phone then uses the PIN to change your AppleID password and changes the recovery key, what happens to all your data and how do you recover from that? Thanks
Make it difficult for them to change it by blocking iCloud account changes. Settings > Screen Time Make sure your screen time passcode is different from your iPhone passcode. This is to prevent that thief from accessing the following control. Content & Privacy Restrictions > Passcode Changes > Don’t allow This is to prevent someone changing the passcode or face id. To change it after, just come back to this setting. Then go to Account Changes and tap Don’t Allow. This blocks access to the iCloud profile at the top of the main page in Settings. To access it later, just come back to this setting.
Im confused about the recovery contact... in order to offer that service this has to mean that Apple has a backdoor to regain access ... otherwise how would the recover contact help ? Your data is encrypted but Apple has a copy of the encryption key in order to let the recovery contact unlock/recover your account ? no ?
Thats where the recovery contact comes in place. It is basically a replacement for apple ,now it’s a trusted person that only you know that can give you the code to unlock your account;not apple anymore
This feature not available in my region India
Not yet, but it’s coming.
I got a message stating that my device is too new to enable this feature. I have to wait until the end of January to be eligible. This is apparently for "my protection".
I got that too on my iMac. If you have an older device that’s signed in with the same Apple ID, you can turn it on from the older device and it will automatically turn it on your new device.
Too new? I’ve never heard that one before. Weird.
@@AllThingsSecured I imagine it’s to prevent people from buying a new device and using your Apple ID to hold your data ransom?
can I store the secret key in password manager? Is it safe?
depends on password manager. Some have been data leaked and comprised. I personally wouldn’t recommend it
You could. It’s up to what kind of risk you can handle.
@@AllThingsSecured How do you store this security key safely?
Write it down in a note book keep it somewhere safe like a bed side table or drawer or on a piece of paper in your wallet if feel safer with it on your person
I need to encrypt my data because I want. That’s it
Absolute encryption requires an absolute backup strategy. Most people won’t think about backing up what’s already on the cloud. E2E/C2E means you have security of local data, with backup safety of the same level. Get mugged and lose all your Apple devices, it’s as good as losing your only ssd with all your data. Gone forever.
It annoys me that nefarious institutions steal my personal information either bluntly or by trickery (read: terms and conditions) and then make money out of it. It bothers me just as much the fear of losing the encryption key. I did this once with my computer before going away on holidays knowing I "should" remember the key. Lately I don't trust anyone and especially any cloud services.
It’s a challenge.
You forgot to mention the screen time passcode that keeps hackers from locking you out! That’s a big omission and leaves people only following these steps 100% vulnerable to passcode thieves!
I tried this and it’s not available in Canada
Yea, hopefully soon.
It’s not available in Europe…
Sorry you have to wait.
Contacts are still exposed
If you are going to turn it on then you wouldn’t receive notifications from your Apple Watch about calls
If e2ee encryption is really existed, Apple should publish the source code.
It's their own operating system. Why would they..
Apple still “sees” your data since they hash it against their database on your phone. If the hash matches, they have an employee look at it. So end-to-end is only good for data in transit.
Where did you get that?
This is encryption, not hashing. The data Apple sees is already encrypted so hashing it on their servers would be pointless. You may be referring to something Apple proposed regarding scanning pictures for CSAM. That scanning would have taken place when the picture was backed up to the iCloud but Apple has decided not to move forward on this. There is still something similar where parents could set up something to protect their kids from receiving adult content but I don’t know if they put that in place.