Apple’s UK ADP Removal: No Backdoor

Apple removed Advanced Data Protection (ADP) for new UK users and will require existing UK users to disable it, rather than comply with a UK government demand to create a backdoor. This means end-to-end encryption for iCloud remains intact for users outside the UK, while UK users lose the highest level of iCloud security. The move is a direct response to a reported UK government notice under the Investigatory Powers Act 2016, which would have forced Apple to weaken security for all users worldwide.

What Is Advanced Data Protection (ADP)?

Advanced Data Protection is an optional iCloud setting that extends end-to-end encryption to nearly all iCloud data. Without ADP, Apple holds the encryption keys and can technically access your data (for example, to comply with legal requests). With ADP, only you—on your trusted devices—can decrypt the data. Apple cannot access it, and neither can anyone who compromises Apple’s servers.

ADP covers most iCloud categories, including:

• Device backups (iPhone, iPad, and Mac)
• Messages in iCloud (but not the Messages app’s standard end-to-end encryption, which is always on)
• Photos, Notes, Reminders, Voice Memos, Safari bookmarks, and more

Some items are never covered, like iCloud Mail, Contacts, and Calendar, because they need to interoperate with other systems.

Why Did Apple Remove ADP in the UK?

In February 2025, reports surfaced that the UK government issued a Technical Capability Notice (TCN) to Apple, demanding access to encrypted data globally. Under the Investigatory Powers Act, such notices can compel companies to remove security features or provide access to data. Apple chose to stop offering ADP in the UK rather than weaken encryption for all users.

Apple’s decision means:

• New UK users can no longer enable ADP.
• Existing UK users will be prompted to disable it within a grace period (Apple said it would provide more details, but as of now, users must turn it off to keep using iCloud).
• Non-UK users are unaffected; they can still use ADP.

Apple has not publicly confirmed the exact wording of the notice, but the UK Home Office has not denied it. The company stated it was “deeply disappointed” and that the move “undermines the security of UK users” without providing a backdoor for anyone.

How Does End-to-End Encryption Work?

End-to-end encryption (E2EE) scrambles data on your device before it is sent to Apple’s servers. Only the recipient (or you, on another device) has the key to unscramble it. Apple never holds the key, so it cannot decrypt the data even if compelled.

For iCloud, Apple uses a system of keys:

• Each device generates a private key that never leaves the device.
• Apple stores an encrypted version of your data, along with an encrypted copy of your key, but the key is locked with a passcode or password that only you know.
• If you lose all devices, you can recover your data using a recovery contact or a recovery key that you set up.

This is why Apple says it cannot comply with a request to hand over iCloud backups—it simply does not have the ability.

What Does This Mean for UK Users?

UK users will lose the option to protect their iCloud data with end-to-end encryption. Their data will still be encrypted in transit and at rest, but Apple holds the keys. This means:

• Apple can access iCloud data in response to lawful requests (e.g., warrants).
• If Apple’s servers are breached, encrypted data could be decrypted by the attacker if they also steal the keys.
• Law enforcement may be able to obtain iCloud backups, photos, and messages (excluding iMessage’s always-on E2EE).

For users who prioritize privacy, this is a significant downgrade. However, iMessage, FaceTime, and other Apple services that use end-to-end encryption by default are not affected.

What Are the Alternatives for UK Users?

If you are in the UK and want end-to-end encryption for your data, you have a few options:

• Use a third-party cloud service that offers E2EE, such as Proton Drive, Tresorit, or Sync.com. These services are designed so the provider cannot access your files.
• Keep sensitive data off iCloud and store it locally on your device, or use an encrypted container like VeraCrypt.
• Use a different messaging app that has E2EE by default, like Signal or WhatsApp, for sensitive conversations.
• Consider using a VPN to protect your internet traffic, but note that this does not affect iCloud storage.

It is important to note that these alternatives have their own trade-offs in convenience and integration. For many users, the convenience of iCloud outweighs the privacy risk, but the choice is now limited.

Common Misconceptions

There is a lot of confusion about this topic. Here are a few clarifications:

• “Apple built a backdoor for the UK.” No. Apple did not create a backdoor. It removed a security feature for UK users instead. The government asked for a backdoor; Apple refused and chose to limit ADP availability.
• “All UK iCloud data is now unencrypted.” No. Data is still encrypted, but Apple holds the keys. It is not end-to-end encrypted, meaning Apple can decrypt it if required.
• “This affects everyone worldwide.” No. Only UK-based users are affected. Apple’s decision was specifically to avoid a global backdoor.
• “iMessage is now readable by Apple.” No. iMessage has always been end-to-end encrypted by default and remains so. ADP is separate.

Frequently Asked Questions

Will my existing ADP be turned off automatically?

Apple has said that existing UK users will need to disable ADP manually within a grace period. If you do not, Apple may disable it for you after the deadline. You will receive notifications in iOS and on the Apple ID website.

Can I use a VPN to bypass the UK restriction and enable ADP?

No. Apple determines your region based on your Apple ID country/region, not your IP address. If your Apple ID is set to the UK, you will not be able to enable ADP, even with a VPN.

Does this affect iCloud backups for UK users?

Yes. iCloud backups are one of the categories covered by ADP. Without ADP, your backups are encrypted but not end-to-end encrypted, so Apple can access them if legally compelled.

What about users who live in the UK but have an Apple ID from another country?

If your Apple ID is registered to a country outside the UK, you are not subject to the UK restriction. However, if you are physically in the UK, Apple may still consider you a UK user based on your account region. The safest way is to check your Apple ID settings.

Will Apple ever bring ADP back to the UK?

It is possible if the UK government withdraws the demand or if the law changes. Apple has said it remains committed to providing the highest level of security to its users, and it will likely restore ADP if it can do so without compromising security.

Is there a way to keep my iCloud data fully encrypted without ADP?

Not with iCloud itself. You can choose to not store sensitive data in iCloud, or use a third-party E2EE service for your most important files. For messages, use an app that has E2EE by default.

Related

• Restore 0 Byte Files? Fixes That Work
• How to Install Pixel 4 Launcher on Older Pixel Phones
• Brother MFC-J6540DW Clear a Jam Warning When No Paper Is Visible