Most iCloud data can now be end-to-end encrypted: Apple

As part of an ongoing privacy push, on Wednesday, Apple said it will now offer full end-to-encryption for nearly all the data its users store in its global cloud-based storage system. That will make it more difficult for hackers, spies, and law enforcement agencies to access sensitive user information.

The world's most valuable company has long placed customer security and privacy at a premium. Its iMessage and Facetime communications services are fully encrypted end-to-end, and it has sometimes locked horns with law enforcement agencies (including the FBI) over its refusal to unlock devices.

However, a lot of what customers backed up remotely using Apple's iCloud service — including photos, videos and chats — has not been afforded uncompromising protection through end-to-end encryption: a technology that prevents even Apple from decrypting it. That has made it easier for crooks, spies, and criminal investigators with court orders to get at it.

No longer. The loophole that law enforcement had for getting at iPhone data will now be considerably narrowed. Apple, which is based in Cupertino, California, did not respond to requests for comment on the timing of the announcement and other issues.

The FBI expressed displeasure at the move.

In a statement, it said it that remains a strong advocate of encryption schemes that provide “lawful access by design” so that tech companies “served with a legal order” could decrypt data and give it to law enforcement.

ALSO READ:

• Spyware poses dire threat to journalists, says US media watchdog

• Over half of users in Middle East have faced online phishing scams, says survey

The agency said it “continues to be deeply concerned with the threat end-to-end and user-only-access encryption pose,” insisting that they hinder its ability to protect Americans from crimes — ranging from cyberattacks to violence against children, and terrorism.

Cryptographers and other cybersecurity experts have long argued, however, that attempts by law enforcement to weaken encryption with backdoors are ill-advised, because they would inherently make the internet less reliable and hurt vulnerable populations including ethnic minorities.

Last year, Apple announced — and then withdrew after a flood of objections — a plan to scan iPhones for photos of child sexual abuse material, or CSAM.

“Where Apple was hesitant about deploying encryption features last year — maybe even backsliding a bit with CSAM scanning proposals — it now feels like they've decided to put the gas pedal down," noted Johns Hopkins cryptography professor Matthew Green on Twitter.

Users are able to activate and deactivate lockdown mode at will.