Expanded iCloud Encryption Can't Be Enabled From New Apple Devices Right Away

[scrapesleon]

That doesn’t even make sense should be able to from the day it’s released

 

[Mr. Heckles]

That doesn’t even make sense should be able to from the day it’s released

This has been said a few times already… but this says it the best:

The FUD is strong in this thread.

• If you have a device that’s been active for a while, you can turn it on.
• If you turn it on, it’s on for ALL devices.
• The reason you can’t use a recently activated device, is so if someone compromises your account and signs in on a device, they can’t lock you out of your data.

 

[sdf]

Likely to save people from themselves. While encrypted iCloud is great - plenty of people are going to get royally burned by it when they forget stuff

Also if someone else manages to get into your account on a new device.

A three month (I assume?) delay seems pretty huge though.

 

[Angel Martin]

I just wanted to state the obvious... If you enable ADP on your Apple ID then you will no longer be able to download your "Apple Data" from the Data & Privacy website. It will be on you to make your own backups of iCloud and Photos.

Just a heads up!

Please explain. I am about to finalize encryption as soon as my HomePods update. Once I go to ADPI have to manually back up from now on?

 

[bLackjackj]

Fantastic news that the US are the guinea pigs for testing. Will make me feel more confident of no data loss once actually launched.

 

[jonnysods]

That's why this is deliberately OPT-IN. When turning this on, the user is assumed to understand the risks and will have been asked to either give a second user permission to help unlock or to print and store the key somewhere. You'd need to have deliberately opted into this, AND forgotten your Apple ID login, AND lost the key or lost contact with the second person who's able to help you unlock. This isn't your typical grandma lapse.

I know what you're saying - however I work in IT, doesn't matter how explicit the warning is, the information regarding the feature, this will happen. I'm not saying that it shouldn't be a feature, I'm all for it, I'm just making a a comment that it will happen. We see it all the time with Bitlocker.

 

[hamiltonDSi]

Quick question;
I have 3 Macs all with different versions of macOS - 14' Pro w/ Ventura, 15' Pro w/ Big Sur (latest supported os) & 13' w/ Mavericks (latest supported).
Reading the FAQ on apple's site i stumbled upon a note, saying that all of my macs should be updated to the latest version.
So since the 13' MB and 15' Pro are a little old and are not running Ventura, what happens if I enable ADP on the 14' Pro ?
Will the other 2 Macs stop connecting to my iCloud ?

Thanks

 

[Lycestra]

Quick question;
I have 3 Macs all with different versions of macOS - 14' Pro w/ Ventura, 15' Pro w/ Big Sur (latest supported os) & 13' w/ Mavericks (latest supported).
Reading the FAQ on apple's site i stumbled upon a note, saying that all of my macs should be updated to the latest version.
So since the 13' MB and 15' Pro are a little old and are not running Ventura, what happens if I enable ADP on the 14' Pro ?
Will the other 2 Macs stop connecting to my iCloud ?

Thanks

View attachment 2129409

I've found myself in a similar situation. The short answer is yes, your other two macs won't connect to iCloud. Or, more precisely, Apple won't let you enable ADP unless you log out of iCloud on any Mac that isn't currently running Ventura 13.1. This is a hard-cutoff of support, even cutting off Monterey and Big Sur, which just got security updates. So the recommendation would be to not enable ADP until you don't need iCloud on those older devices, or have retired them completely.

 

[hamiltonDSi]

I've found myself in a similar situation. The short answer is yes, your other two macs won't connect to iCloud. Or, more precisely, Apple won't let you enable ADP unless you log out of iCloud on any Mac that isn't currently running Ventura 13.1. This is a hard-cutoff of support, even cutting off Monterey and Big Sur, which just got security updates. So the recommendation would be to not enable ADP until you don't need iCloud on those older devices, or have retired them completely.

Thanks for the info and the super fast reply

 

[russell_314]

I don't know if anyone has come up with the reason for this but it's clear to me.

It's to prevent making disposable iCloud accounts secure from law enforcement. Apple gets enough heat from governments so making it so easy to create disposable accounts would not look good for them.

The only way you wouldn't be able to do this on an current iCloud account is if you lost or destroyed all of your existing devices.

 

[FreakinEurekan]

That’s false. You can’t enable it at all if you either have a device added to your iCloud account that does not support iOS 16 or macOS Ventura or apparently a new device. If you have those devices, you have to remove them from your iCloud account first. All your devices have to jive because you won’t be able to use iCloud at all with any of those devices, the older ones or a recently added device. The case might be different if ADP is already enabled for your iCloud account and THEN get a new device.

It's true that you can't have a device that isn't on 16.2/13.1 - which makes sense, devices not up to date won't support E2EE so they'd be locked out of your data.

But you can HAVE a recently activated device - you just can't use it to set up E2EE. I set mine up, with a 3-week-old iPad on the account. I just didn't use that iPad to activate it.

 

[Raist3001]

FYI - Turning on Advanced Data Protection, removes Photo Stream from your device(s)