Turn on Advanced Data Protection so only your devices can read your iCloud data

Why it happens

With standard iCloud protection, some of your data is encrypted with keys Apple also holds, so Apple can help you get it back if you're locked out. Advanced Data Protection moves those keys to your own devices only, for things like iCloud Backup, iCloud Drive, Photos and Notes. The trade-off is real: if you lose access to all your devices and your recovery methods, Apple can't recover that data for you.

How to fix it

1. Make sure every Apple device signed in to your account is up to date, because older software can block the switch. On the Mac, two-factor authentication must be on, which it is for most accounts.

   Apple Account›Sign-In & Security

2. Set up a way back in. In Sign-In & Security, click Recovery Contacts and add someone you trust, or set up a Recovery Key and keep it somewhere safe and offline. Having both is wise.

   Apple Account›Sign-In & Security›Recovery Contacts

3. Go back to your Apple Account, click iCloud, then Advanced Data Protection. Click Turn On and follow the steps on screen. Your Mac will ask for your password and check your recovery method.

   Apple Account›iCloud›Advanced Data Protection

4. If the Mac lists devices that are too old to support it, you'll need to update them or remove them from your account before it can switch on.

5. Give it time. Encrypting everything can take a while in the background. Once it's on, it covers your whole account, so your iPhone and iPad show it as on too.

Still not fixed?

1. If you'd like to keep using iCloud.com in a web browser, look for Access iCloud Data on the Web in iCloud settings. With Advanced Data Protection on, it's off unless you allow it, and you approve each sign-in from one of your devices.

2. If the option is dimmed or won't turn on, check that you're signed in with your own personal account. Child accounts and work or school Managed Apple Accounts can't use it. It isn't offered in some countries or regions, and there your Mac says Advanced Data Protection is not available in your country or region.

3. If it still fails, you can also turn it on from an up-to-date iPhone: open Settings, tap your name, tap iCloud, then Advanced Data Protection. It's the same setting for the whole account.

4. If it keeps failing with an error, contact Apple Support. Have your devices to hand, but never give anyone your Recovery Key or passwords.