Apple finally adds encryption to iCloud backups

Apple

today
introduced several
new
security
features focused
on
fending
off
threats
to
user
data
in
the
cloud,
including
end-to-end
encryption
for
backups
for
iCloud
users.

[…]

Apple finally adds encryption to iCloud backups

Apple

today
introduced several
new
security
features
 focused
on
fending
off
threats
to
user
data
in
the
cloud,
including
end-to-end
encryption
for
backups
for
iCloud
users.

Along
with
end-to-end
encryption
for

iCloud
,
Apple’s
cloud
storage
and
computing
platform,
the
company
announced
iMessage
Contact
Key
Verification,
allowing
users
to
verify
they
are
communicating
only
with
whom
they
intend.


apple advanced security advanced data protection inline.jpg.large


Apple

Apple
also
announced
hardware
Security
Keys
for
Apple
ID,
giving
users
the
choice
to
require
two-factor
authentication
to
sign
into
their
Apple
ID
account.
(Hardware
security
keys
use
devices,
such
as
USB
thumb
drives
or
near-field
communication
(NFC)
dongles,
to
enable
access
to
a
service
or
application.)

Calling
it
Advanced
Data
Protection,
Apple
said
it’s
expanding
iCloud
encryption
capabilities
from
14
“sensitive
data
categories”
protected
by
end-to-end
encryption
in 23
new
categories
;
included
in
those
categories
of
protected
data
will
be
backups,
Contacts,
Notes,
Photos,
Voice
Memos
and
Wallet
Passes.
Previously,
iCloud
end-to-end
encryption
capabilities
applied
only
to
more
sensitive
data,
such
as
passwords
in
iCloud
Keychain
and
personal
health
data.

The
only
data
categories
still
not
covered
by
Advanced
Data
Protection
is
iCloud
Mail,
Contacts,
and
Calendar
because
they’re
needed
“to
interoperate
with
the
global
email,
contacts,
and
calendar
systems,”
Apple
said
in
a
statement.

Advanced
Data
Protection
for
iCloud
is
available
in
the
US
today
for
members
of
the
Apple
Beta
Software
Program
and
will
be
available
to
all
US
users
by
the
end
of
the
year.
The
feature
will
start
rolling
out
to
the
rest
of
the
world
in
early
2023,
Apple
said.

iMessage
Contact
Key
Verification
will
be
available
globally
in
2023,
with
Security
Keys
for
Apple
ID
available
globally
in
early
2023.


apple advanced security security keys inline.jpg.large


Apple

Through
Security
Keys,
users
can
choose
third-party
hardware
security
keys
create
a
two-factor
authentication
scheme.

The
feature
is
designed
for
users
who,
often
due
to
their
public
profile,
face
concerted
threats
to
their
online
accounts,
including
celebrities,
journalists,
and
members
of
government,
Apple
said.

“With
iMessage
Contact
Key
Verification,
Security
Keys,
and
Advanced
Data
Protection
for
iCloud,
users
will
have
three
powerful
new
tools
to
further
protect
their
most
sensitive
data
and
communications,”
Craig
Federighi,
Apple’s
senior
vice
president
of
Software
Engineering,
said.

Apple
said
the
enhanced
data
security
features
for
iCloud
are
needed
“more
than
ever”
because
the
number
of
data
breaches
more
than
tripled
between
2013
and
2021,
“exposing
1.1
billion
personal
records
across
the
globe
in
2021
alone.

“Increasingly,
companies
across
the
technology
industry
are
addressing
this
growing
threat
by
implementing
end-to-end
encryption
in
their
offerings,”
Apple
said.

Apple,
however,
has
been
a
slow
follower
in
encryption.
For
example,
more
than
a
year
ago,
Facebook’s
WhatsApp
added
full
encryption
for
messenger
and
data
backups.

Subscribe To InfoSec Today News

You have successfully subscribed to the newsletter

There was an error while trying to send your request. Please try again.

World Wide Crypto will use the information you provide on this form to be in touch with you and to provide updates and marketing.