The security of Apple’s iCloud storage service is further improved. The tech company is going to introduce something called Advanced Data Protection. For example, photos, videos and messages are stored encrypted and only the user has the keys to decrypt the files.
Until now, only health data, passwords and payment information were stored encrypted. Thanks to the new security, almost all files in iCloud are now encrypted. Exceptions are email, contacts, and calendars; encryption is not yet possible for this.
Apple is also changing where so-called encryption keys are stored. This allows files to be encrypted or decrypted. Until now, these keys were stored on Apple’s iCloud servers. Hackers who gained access to Apple servers could also gain access to iCloud user data. To avoid this, the keys are now stored on the user’s device.
The new security feature also means that Apple cannot provide data to governments and law enforcement if they request it. There was more to do there, as a lot of people’s personal data is stored through their mobile phones. Therefore, these access services can learn a lot about people, possibly including sensitive information.
iCloud was a weak link in the security of Apple devices
Apple’s cloud storage has long been considered vulnerable, even though the company’s devices already offer high-level security capabilities. With the upgrade of these capabilities, Apple now wants to close this gap.
Apple also offers an additional security option for iMessage. This allows users to check if the person they are chatting with is really that person. The two chatters then receive a message with the same code from Apple and can thus determine the identity of the other.
The new features will be available in the US this month. Apple will roll out the new capabilities to the rest of the world starting early next year.