Turn THIS on if you use iCloud!

Summary

The video script discusses the misconception of privacy associated with Apple's iCloud service. Despite Apple's marketing on privacy and the introduction of end-to-end encryption for certain iCloud categories in late 2022, the script highlights that iCloud may not be as private as users believe. It explains that the 'Advanced Data Protection' setting, which prevents even Apple from accessing user files, is not enabled by default. The video provides a guide on how to enable this setting, including updating devices, setting up account recovery, and using two-factor authentication. It also outlines the limitations of Advanced Data Protection, noting that iCloud Mail, Contacts, and Calendars are not end-to-end encrypted, and metadata remains visible to Apple. The script concludes with alternative backup options for those seeking to limit their exposure to the Apple ecosystem and emphasizes the importance of taking control of one's data privacy.

Takeaways

• 📱 Apple's marketing emphasizes privacy, leading users to believe their data is private when using Apple products.
• ☁️ iCloud, Apple's cloud storage service, is not as private as users might think without additional settings.
• 🔒 End-to-end encryption for iCloud was introduced in late 2022 for certain categories, enhancing data security.
• 🛡️ The 'Advanced Data Protection' setting offers stronger privacy by ensuring only the user can access their files, even from Apple.
• ⚠️ Advanced Data Protection is not enabled by default, meaning Apple can see your data if you haven't turned it on.
• 📅 To enable Advanced Data Protection, update all devices, enable Account Recovery, and set up a recovery contact or key.
• 🔓 With Advanced Data Protection on, you won't be able to access your data via iCloud.com unless you manually toggle the feature.
• 🚫 Despite Advanced Data Protection, iCloud Mail, Contacts, and Calendars are not end-to-end encrypted.
• 📁 Apple can still see metadata for all files, even with Advanced Data Protection enabled.
• 🔑 Users are responsible for their own data recovery; Apple does not have access to help with account recovery.
• 🌱 For users concerned about privacy, there are alternative options to Apple's ecosystem for mail, calendar, and file backups.

Q & A

What is the main misconception about iCloud privacy that Apple users often have?

Many Apple users assume that all their data with iCloud is private due to the company's aggressive marketing on privacy, but in reality, iCloud may not be as private as they think, especially if the Advanced Data Protection setting is not enabled.

What was introduced by Apple in late 2022 to enhance user privacy and data security in iCloud?

Apple introduced end-to-end encryption for a range of iCloud categories and a setting called 'Advanced Data Protection' which significantly enhances user privacy and data security by ensuring that protected data can only be accessed by the user.

Why is it crucial for users to know about the default settings of the new end-to-end encryption feature in iCloud?

It's important because the end-to-end encryption provided by the new setting is not turned on by default. This means that if users have been backing up their private files to iCloud without enabling Advanced Data Protection, Apple has been able to see everything they've uploaded.

What are some of the data categories protected by the Advanced Data Protection setting in iCloud?

Advanced Data Protection protects iCloud Backup including device and Messages backup, iCloud Drive, Photos, Notes, Reminders, Safari Bookmarks, Siri Shortcuts, Voice Memos, Wallet passes, and Freeform.

What steps are required to enable Advanced Data Protection on iCloud?

To enable Advanced Data Protection, users must update all their devices to the latest software versions, enable Account Recovery by setting up a recovery contact or a 28-character recovery key, and ensure that 2FA is enabled on their Apple ID with a passcode locking their device.

What is the main limitation of Advanced Data Protection when it comes to iCloud Mail, Contacts, and Calendars?

Even with Advanced Data Protection enabled, iCloud Mail, Contacts, and Calendars are not end-to-end encrypted. Apple retains the ability to scan these data due to the need for interoperability with other email and calendar providers.

What metadata is still visible to Apple even when Advanced Data Protection is enabled?

Apple can still see metadata such as file type, file size, how many times a photo has been viewed, whether a file was pinned or marked as favorite, and usage data like timestamps of when the file was created or last modified.

What is the responsibility of the user when it comes to regaining access to their account with Advanced Data Protection enabled?

With Advanced Data Protection enabled, Apple does not have access to the user's account, so the user is responsible for keeping their recovery contact information up to date and ensuring their recovery key is saved safely. These are the only options to recover the account if the password is forgotten.

What alternative options are suggested for users who want to limit their exposure to the Apple ecosystem for backups?

For users looking for alternatives, it's recommended not to use Apple mail, calendar, or contacts due to the lack of end-to-end encryption. Instead, users can explore more private email options, use Proton's end-to-end encrypted calendar, store contacts locally on a device, and consider private backup options like Proton Drive, Synology, or Nextcloud.

How does the privacy and security of Apple products compare to top competitors?

Apple products generally offer a higher level of security and privacy compared to top competitors. For instance, a stock iPhone is considered more private and secure than a stock Android device.

What is the importance of turning on Advanced Data Protection for users who are already logged into an iCloud account?

Turning on Advanced Data Protection is a crucial step for users to improve the privacy of their digital files. It ensures that only devices signed into the user's iCloud account and explicitly trusted by the user can access the files.

How is the NBTV channel funded, and how can viewers support it?

NBTV is funded entirely by community donations. Viewers can support the channel by making donations through the provided link on their website or by purchasing their book, 'Beginner’s Introduction to Privacy'.