Is iCloud Safe? What You Need to Know to Protect Yourself
Updated: Jun. 27, 2024
As you save more and more data on your devices, you might be wondering, Is iCloud safe—really? Here’s what cybersecurity experts say.
I use my iPhone, iPad and MacBook for work, social connection and entertainment, just like millions of other people. And one of the things I like best about the Apple environment—and maybe you do too—is the ability to seamlessly access my photos, music, contacts and apps, no matter which device I’m using. This is all possible because of Apple’s iCloud. But have you ever wondered, What is “the cloud,” exactly, and is iCloud safe?
They’re important questions because you likely have a lot of data stored in the iCloud. And chances are, you’re not quite sure where the cloud is, what’s in it and who else may have access to it. With hackers finding newer and sneakier ways to steal your personal information, it’s essential to know just how protected you are and what you can do to bolster your online security.
Well, you’re in the right place. To answer those questions and more, Reader’s Digest spoke with Thomas Reed, director of cyber technology at Malwarebytes Labs, and Dave Hatter, a cybersecurity consultant for inTrust IT. Ahead, they’ll tell you everything you need to know about the iCloud, as well as provide some smart tech tips for using it so you can stay safe online.
Are Apple devices truly that safe, or can iPhones get viruses too?
Get Reader’s Digest’s Read Up newsletter for more tech, travel, cleaning, pets, humor and fun facts all week long.
About the experts
|
What is iCloud?
The iCloud is Apple’s version of “the cloud,” an online network of servers that house and deliver data to computers across the internet. Apple stores some iCloud data on its own servers and some on third-party servers like Google’s. Basically, iCloud functions as a digital locker that lets users store data such a photos, videos, email messages, text messages, documents, calendar invitations, contact lists, reminders and apps. This can come in handy when you need more storage space than your device offers.
It also syncs all these types of files across your iPhone, iPad and Apple computer, so that each always shows the latest changes, regardless of which device you view them on. That means you can pick up where you left off in just about any app (say, a Word or Pages doc), view stored photos or sync your Safari bookmarks and reading list on any of your Apple devices—as long as they are logged into iCloud with your Apple ID account.
At its core, Apple’s iCloud works just like an external hard drive to save and protect your digital files. But hard drives can be lost to theft, fire, flood—you name it—and they also take up physical space on your desk. Instead of worrying about those potential risks, you can store your data in the cloud for an added layer of protection. All iCloud users get 5 GB of free storage.
The other benefits of using iCloud
Beyond being a super safe storage center, the iCloud has other perks, and you don’t even have to be an iPhone user to utilize them. Here are some other functions that you can opt in for, whether you have an Apple device or Android.
- iCloud Backup: This feature can take daily “snapshots” of your data. That way, if a catastrophe hits one or more of your devices—or even if you just need to set up a new iOS device—iCloud has you covered. The cloud service can transfer the backup of your Mac, iPad or iPhone stored on its servers to your device, and you won’t lose any data in the process.
- Find My: As long as a lost device is logged in with your Apple ID, Find My can help you pinpoint its location on a map and find your lost iPhone (or other device). If you think the device is within earshot, this app also allows you play a loud sound to locate the device. If you still can’t find it, you can lock the device with “lost mode” and even erase its data remotely.
- iCloud email: iCloud users get a free email account with an @icloud address, which you can access on any device or web browser. And unlike other free email accounts, you won’t see any ads.
- Family Sharing: This gives you the ability to share photos, music, movies, books and subscriptions with up to five family members.
- iCloud Passwords and Keychain: This feature securely stores your passwords and passkeys for websites and apps, as well as Wi-Fi and credit card info. The data is encrypted and can’t be read by anyone at Apple or elsewhere.
Is iCloud safe?
While no system is perfect, iCloud security is quite safe overall. In fact, the experts we spoke with agree that iCloud is an essential service for Apple users looking to store and back up their files. Here are the main features that protect your data.
Two-factor authentication
All new Apple IDs require two-factor authentication (2FA). This added layer of security goes beyond simply entering a user name and password. When you attempt to sign into your account with a new device or on a website, Apple will send you a six-digit verification code. You’ll need to enter that code to continue logging in. Since iCloud is connected to your Apple ID, this step is essential in terms of protection.
Encrypted data
Data stored in the iCloud is encrypted, both at rest and in transit, which means the information is scrambled at all times and no one can see it unless they have a digital key to unlock it. For standard encryption, Apple retains a key so they can help you recover your data if necessary (like if you’ve forgotten your password.)
Apple also automatically stores 15 categories of extra-sensitive data, such as health data, with end-to-end encryption for added security. End-to-end encryption is the safest and most secure way to protect your data because even in the event of a data breach in the cloud, no one except you can access it. In 2023, Apple released an optional security measure known as Advanced Data Protection, which applies end-to-end encryption to an additional 10 categories. To enable this feature, you must be using iOS 16.2 or later on your mobile device and macOS 13.1 or later on your computer.
What are the risks of using iCloud?
A report last year suggested that the iCloud Backup feature, in particular, put users’ data at risk. The idea was that if someone gained access to your iCloud account, they could download all the information in your Backup. Reed, however, says the same would be true of any backup service, whether it was Backblaze, Dropbox, Google Drive, OneDrive and so on. “The solution isn’t to stop using iCloud Backup—it’s to better protect your account,” he says. “I personally use iCloud Backup for my iOS devices, but I’d also advise using Advanced Data Protection if you do, just to be on the safe side.”
Another potential risk is that Apple can see some of your data. Though Apple does rely on other companies’ servers to store user data, no one can see anything that is encrypted. However, Reed says that Apple “may be required to share what they can access with law enforcement if subpoenaed. How much of your data they can see depends on whether Advanced Data Protection is turned on.”
Finally, in the unlikely event that Apple’s iCloud system ever becomes compromised, criminals might be able to access data stored and synced there.
How can I keep my data as secure as possible?
While iCloud has a lot of built-in security, the question of whether iCloud is safe still largely depends on your online-security hygiene, experts say. “There has never been a known breach of the iCloud service resulting in exposure of user data,” Reed says. “However, weaknesses in iCloud logins have been exploited multiple times in the past.”
To protect yourself, be sure to use the following practices:
Turn on 2FA
If it’s not already activated, turn on 2FA now. This ensures that you’re the only person who can use your Apple ID, since it’s confirming that you’re you with a message to your phone, even if someone has figured out your password.
Guard against phishing
“The most likely scenario for someone gaining access to your iCloud data is if they manage to get access to your iCloud account,” Reed says. “This would typically be done through something like phishing, a phone/text scam where the scammer convinces you to give them information [such as your 2FA code] that helps them get access,” Reed says. By being aware of common phishing tactics and their telltale signs, you can prevent data theft.
Enable Advanced Data Protection
When you turn on this iCloud feature, you get end-to-end encryption on even more types of data. The only downside to using this is that if you lose access to your iCloud account for some reason, Apple can’t help you recover your data. But when you set it up, Apple prompts you to set up at least one recovery contact or a recovery key. In theory, “you could end up locked out of all your data,” Reed says, but “this scenario would require losing access to all your devices as well as the recovery key.”
Use security software
To prevent the bad guys from installing malware or gaining access to your account through other means, consider installing security software, such as Malwarebytes or one of these security apps.
Update the software on all your devices
It may seem like Apple is constantly prompting you to update to the newest version of its operating system, but it’s for a good reason: It usually provides additional security features and bug fixes.
Don’t use open Wi-Fi
When and where you access iCloud will determine how secure it is. “Only access iCloud from a trusted network, not open Wi-Fi networks,” Hatter says. “And even better, use a virtual private network (VPN).”
The bottom line
While all of these safeguards will help protect your devices, nothing is 100%. If there is information you really wouldn’t want someone else to get access to, use the highest level of protection possible for iCloud or simply keep it off your device.
Additional reporting by Brooke Nelson Alexander.
Why trust us
Reader’s Digest has published hundreds of articles on personal technology, arming readers with the knowledge to protect themselves against cybersecurity threats and internet scams as well as revealing the best tips, tricks and shortcuts for computers, cellphones, apps, texting, social media and more. For this piece on iCloud safety, Laurie Budgar and Brooke Nelson Alexander tapped their experience as tech reporters and interviewed cybersecurity experts. We rely on credentialed experts with personal experience and know-how as well as primary sources including tech companies, professional organizations and academic institutions. We verify all facts and data and revisit them over time to ensure they remain accurate and up to date. Read more about our team, our contributors and our editorial policies.
Sources:
- Thomas Reed, director of cyber technology at Malwarebytes; email interview, May 8, 2024
- Dave Hatter, cybersecurity consultant for inTrust IT; email interview, 2021
- Apple: “What is iCloud?”
- Apple: “iCloud data security overview”
- Apple: “Two-factor authentication for Apple ID”
- New York Times Wirecutter: “Why you should enable Apple’s new security feature in iOS 16.2 right now”
- Yahoo: “Security experts agree: This is the one iCloud setting you have to stop using immediately.”
Originally Published: January 12, 2021
