Last week, an article in the Washington Post revealed the UK had secretly ordered Apple to provide blanket access to protected cloud backups around the world. Since then, privacy focused groups have uttered their objections.
The UK government has demanded to be able to access encrypted data stored by Apple users worldwide in its cloud service. However, Apple itself doesn’t have access to it at the moment, only the holder of the Apple account can access data stored in this way.
Neither the Home Office nor Apple responded on the record to queries about the demand served by the Home Office under the Investigatory Powers Act (IPA) , but the BBC confirmed that it had heard the same information from reliable sources.
Privacy International said the demand is a “misguided attempt” that uses disproportionate government powers to access encrypted data, which may:
“Set a damaging precedent and encourage abusive regimes around the world to take similar actions.”
The Electronic Frontier Foundation (EFF) stated:
“Encryption is one of the best ways we have to reclaim our privacy and security in a digital world filled with cyberattacks and security breaches, and there’s no way to weaken it in order to only provide access to the good guys.”
The main goal for the Home Office is an optional feature that turns on end-to-end encryption for backups and other data stored in iCloud. This feature is called Advanced Data Protection. Enabling Advanced Data Protection (ADP), protects the majority of your iCloud data — including iCloud Backup, Photos, Notes, and more — using end-to-end encryption.
For some time, these backups presented law enforcement agencies with a loophole to obtain access to data otherwise not available to them on iPhones with device encryption enabled. If the user hasn’t enabled ADP, this loophole still exists.
The EFF recommends users should turn off the option to create iCloud backups should the UK get its way. As the EFF has said before, and we agree, there is no backdoor that only works for the “good guys” and only targets “bad guys.” It’s all or nothing, and the bad guys will have enough money to find alternatives, while regular users may run out of free options if governments keep doing this.
What can I do?
How you wish to proceed after this news is obviously up to you, but we have some options you may be interested in. If you think Apple will stand up against the UK’s Home Office you can enable iCloud backup and Advanced Data Protection.
But if you want to find another place for your backups, these instructions may come in handy.
How to turn off iCloud backups
On iPhone or iPad
- Tap Settings > {username} > iCloud On your iPhone or iPad.
- This will list the devices with iCloud Backup turned on.
- To delete a backup, tap the name of a device, then tap Turn Off and Delete from iCloud (or Delete & Turn Off Backup).
On Mac
- Click Manage > Backups.
- A list of devices that have iCloud Backup turned on is shown.
- To delete a backup, select a device, then click Delete or the Remove button.
Note: If you turn off iCloud Backup for a device, any backups stored in iCloud are kept for 180 days before being deleted.
How to turn on Advanced Data Protection
If you haven’t enabled ADP and you want it, first update the iPhone, iPad, or Mac that you’re using to the latest software version.
Turning on ADP on one device enables it for your entire account and all your compatible devices.
On iPhone or iPad
- Open the Settings app.
- Tap your name, then tap iCloud.
- Scroll down, tap Advanced Data Protection, then tap Turn on Advanced Data Protection.
- Follow the onscreen instructions to review your recovery methods and enable Advanced Data Protection.
On Mac
- Choose Apple menu > System Settings.
- Click your name, then click iCloud.
- Click Advanced Data Protection, then click Turn On.
- Follow the onscreen instructions to review your recovery methods and enable Advanced Data Protection.
Note: If you’re not able to turn on Advanced Data Protection for a certain period of time, the onscreen instructions may provide more details.
We don’t just report on phone security—we provide it
Cybersecurity risks should never spread beyond a headline. Keep threats off your mobile devices by downloading Malwarebytes for iOS, and Malwarebytes for Android today.