In an era marked by increasing digital threats, Apple has issued a security warning for millions of users, described by the Electronic Frontier Foundation (EFF) as “an emergency for us all.” This comes after Apple removed iCloud’s end-to-end encryption in the UK due to government mandates requiring backdoor access to secure data. Although Apple complied by pulling Advanced Data Protection (ADP) for UK users, it doesn’t fully meet the mandate. Apple expressed disappointment over the inability to offer ADP to UK customers amid rising data breaches and privacy threats.
While the change directly affects UK users, it also impacts anyone communicating with them, as messages will be stored in accessible backups. This move could set a precedent for other governments to impose similar measures. Europe has seen pushes for messaging scanning, and the U.S. advocates for “responsible encryption,” implying warranted access. Consequently, this change poses a broader risk, urging all users to reassess their data security.
Technically, end-to-end encryption has been removed from apps like Photos, Notes, Reminders, and Voice Memos, which aren’t fully secured by default. More critically, device backups and iCloud Drive storage will no longer be fully encrypted and will be accessible by Apple. UK users with ADP enabled are warned to change their settings or risk data deletion, highlighting the irony of Apple’s lack of access to enforce the change itself.
End-to-end encryption is crucial for messaging apps like iMessage and WhatsApp. For iMessage users, enabling “Messages in iCloud” stores a backup of messages, creating a vulnerability reinstated by the UK mandate. Users must choose between disabling iCloud syncing or accepting the risks.
WhatsApp, owned by Meta, remains secure as its end-to-end encrypted backups on iCloud or Google Cloud are unaffected. However, enabling a general iCloud WhatsApp backup alongside other apps duplicates WhatsApp’s own backup. With ADP gone, users should disable iCloud backup and enable daily end-to-end encrypted backups directly from WhatsApp via Settings-Chat-Chat Backup.
For apps you wish to keep secure, disable them in iCloud settings. Platforms offering fully encrypted backups might be preferable until full security is restored. Signal, known for its security, doesn’t offer iPhone backups and remains fully secure.
Apple asserts its commitment to user security, hoping to reinstate high-security levels in the UK. Meanwhile, users can secure critical data by making necessary changes. ADP remains active for existing UK users until Apple enforces a deadline. Non-UK users without ADP face similar risks and should adjust WhatsApp and iMessage settings accordingly.
The disparity in the UK mandating this for Apple but not Google or Meta raises questions. Apple’s public compliance suggests that if similar changes occur elsewhere, those platforms may need to follow suit. For now, the UK aligns with countries like China, Russia, and Iran in governmental privacy crackdowns.
— news from Forbes