Apple’s new security features aren’t available to everyone: Enhanced end-to-end encryption for iCloud and security keys protecting the Apple ID don’t turn on with Managed Apple IDs or on children’s devices. This means that companies and schools that use managed Apple IDs are excluded from the new protection options – as are child accounts. Whether support for managed Apple IDs will follow at a later date remains unclear for the time being. Apple only records the restriction in support documents, and there has not been any announcement so far.
End-to-end encryption for iCloud services
With the Apple “extended data protection” function, end-to-end encryption can be activated for most iCloud services, which is also possible in Germany from iOS 16.3 and macOS 13.2. To activate this, users must update all their Apple devices linked to their own Apple ID to the latest software version – at least iOS 16.2 and macOS 13.1 Ventura. Older hardware can then only be used with another Apple ID or without one.
Only the extended data protection also covers central elements such as iCloud photos and the iCloud backup through end-to-end encryption, so that Apple says it no longer has a key and can no longer release the data to third parties. The online data backup, which is automatically active when you log in with the Apple ID, contains a large amount of personal data and also gives access to the iMessage chat history.
Security keys protect Apple ID
From iOS 16.3 and macOS 13.2, users also have the option of protecting their Apple ID or iCloud account with security keys: Instead of a one-time code, Apple’s two-factor authentication then requires a hardware token in the form of a FIDO-compatible security key. This additional protection is not only interesting for individuals who are particularly at risk from targeted phishing attacks, but also for corporate use. However, this cannot be activated there if the employees use managed Apple IDs created by the organization. This is also the topic of the new forum Mac & i Prowhich is aimed at administrators and developers.
(lbe)
