Security Setting EVERY Apple User Needs to Fix (Tutorial)

[@AllThingsSecured]

Are you going to turn on Advanced Data Protection for your iCloud account? Leave a comment below to let me know if this was helpful!

[@gorillaflex]

What's the best antivirus or anti malware to get to prevent spyware and stalker ware from getting on your device in the first place. And remove it If you have it. I know you said cert in one video. But what antivirus can you use to prevent it from happening in the first place. And Certos just for iPhone, what about Mac and laptops. What's the best antivirus for those.

[@andreylucass]

No, because ios 16 isn't available for the iPhone 7+ 🤡

[@DJ-tt4eb]

Yes

[@Diego-if7ur]

Of course mate. Hopefully we can scan the iPhone with Norton, though. iOS 17 is going to be a lotto win for hackers (side loading)

[@word42069]

Yup, and some other security features now available.

[@specialk9999]

Just an FYI to anyone who might not know, recovery contacts only works if the other person is using an Apple product too.

[@AllThingsSecured]

That’s a good point.

[@martinlutherkingjr.5582]

@@AllThingsSecuredDo recovery contacts have to have a specific version of iOS/device if you have advanced data protection enabled? I understand for advanced data protection to work you have to be on a recent version of iOS but what about your recovery contacts?

[@mikebuck4841]

Just an FYI to anyone with an older device on your iCloud account that isn't compatible with Advanced Data Encryption, if you remove that device from your iCloud and enable encryption on your iCloud there is a very good chance you will NOT be able to re-add that device if you turn the encryption off. Apple instructions on disabling the Advanced Data Encryption imply that older devices can be on your account if the encryption is off, however I am now locked out of my iCloud account on my Mac Mini late 2014 even with the data encryption off. I removed it from my iCloud during the process of enabling the data encryption so maybe if you remove the older device prior to beginning the process it would be OK but I can't verify that would work either.

[@mgaming7]

I bet SOOOO many people end up locking themselves out of their accounts with this. I get why Apple allows it. I understand why people should use it, but most people don't even know how to manage their simple 8 digit password, much less a password, a pin code and keeping track of a 28 character key.... I would advise that only with extensive data protection knowledge, do this. Don't go to mom's house and encrypt her phone and lose all her stuff.

[@brandonw1604]

As long as someone is on their devices nothing is wrong. Adding a new device is simple as well if you do what you should do and activate the new one before wiping the old device.

[@mgaming7]

@@brandonw1604 what does that have to do with my comment or even the video?

[@brandonw1604]

@@mgaming7 people locking themselves out…

[@word42069]

I’m pretty well-versed in this area but changed my iPhone passcode to a more secure alphanumeric one and then managed to forget it the following morning before I got to writing it down (this is unlike me). Thank God I had a recovery contact because otherwise from that one simple error, I was locked out of not only my phone, but my iCloud account and even upon restoring my phone, would have been locked out from recovering it…. despite having all my (other) passwords, pins, security keys, etc. 💀💀💀

[@thangdamminh6338]

Pro tip: generate a recovery key, print a physical copy of it (paper), leave it in the phone's box. Also make at least 2 or 3 backups and store it locally or cloud

[@eamonshields2754]

The hotel analogy was great thanks

[@phillo1818]

I’ve been programming encryption and using encrypted systems since it was command-line interface only. Since PGP went GUI encryption for the masses has never been so user friendly. And BB OS was awesome requiring very little tweaking to create an impenetrable communication system. On my iPhone 11 Pro Max and iPad Pro (2nd Gen.) 12.9” I’ve denied applications access and turned Seri completely off ..etc. QUESTION: Why is it that in Canada the Advanced Data Protection is not available as yet? Keep preaching bro!

[@AllThingsSecured]

Thanks, Phil! I’m not sure why, except perhaps they’re using the US to test everything before rolling it out globally?

[@portraitonetelo1897]

Great review however, I've got one question. Those using Windows and subscribed to iCloud are they able to use and setup the Advanced Data Protection via the browser or the dedicated iCloud Windows app? Been contemplating of getting iCloud mainly, because of the E2EE protection over other cloud services. Tks.

[@Dk-qf8dd]

ADP … if iCloud was a far more stable system I would agree. As a multiple OS user, the iCloud is a poor option. Fix the iCloud and fix the Passkey issue. Maybe then it will be a better option.

[@rthegreat8346]

@All Things Secured, I don't know much about computers and that's why I subscribed to your channel. Therefore, I have a question for you: Do you recommend switching on "Access iCloud Data On The Web" under iCloud settings on my Mac? Furthermore, can you explain the securities pros and cons of turning this feature on? Maybe you should consider doing a video about this for beginners like myself.

[@Ferbeldeyberb]

He doesn’t care.

[@Alarcahu]

Once it comes to my country I'll definitely be turning it on. Some privacy advocates are still advocating alternative places to store your data - is that just an extreme privacy measure? Or is there another reason? (I know Apple tracks telemetry so it could just be that.)

[@Super-360]

Would love a tutorial on apple account recovery using a trusted contact as I'm curious if there is any vulnerabilities in letting a recovery contact be able to recover your account?

[@JoeBuck-uc3bl]

I’m pretty illiterate with this stuff so pardon me if this is a stupid question lol, is Advanced Data Protection, and linking your iPhone with a Yubico security key pretty much a mutually exclusive security move, or would you actually want to do both? Thanks.

[@darkwolf41nite53]

Save everything to the pc then to a ext external hard drive then unplug it after it’s all saved that will work too

[@libbyd1001]

Another reason not to turn it on: In addition to a relatively new Mac Mini, I also have an old 2011 MacBook Pro. It can’t be updated anywhere near the latest OS, therefore I can’t do the step you described in the video making your other devices compatible. And I don’t want to remove that old MacBook from my account, it’s a little slow but is otherwise fine. So no new improved security for me until that device finally craps out.

[@pitstop_calvin]

I’m in the same situation. I turned it on for my iPhone but I had to take my old iMac off line with Apple. It’s a little frustrating since they don’t sync anymore nor can I connect to the App Store etc. But I’m looking to get a new iMac very soon so I’m just dealing with the inconvenience.

[@AllThingsSecured]

Yea, I hadn’t considered that, but you’re exactly right.

[@gorillaflex]

What's the best antivirus or anti malware to get to prevent spyware and stalker ware from getting on your device in the first place. And remove it If you have it. I know you said cert in one video. But what antivirus can you use to prevent it from happening in the first place. And Certos just for iPhone, what about Mac and laptops. What's the best antivirus for those.

[@greg3626]

Thanks for a very clear video. I do have another question. If I lose access to all my Apple devices, let say from fire or otherwise destroyed, can I still access iCloud from a web browser ? Is the problem the fact that because I don't have any devices I won't have any means to access 2FA and therefore I will need a recovery key from a trusted contact (previously set up) or fill in the long recovery key ?

[@sense8296]

This is such a helpful video!Thank you for all this information! I just have one question. Does this protect us if we suspect keylogger on our phone? I think someone is tracking what I type, but can’t be sure. Thanks again.😊

[@togwam]

How secure would my iPhone be if I enabled both this and lockdown mode?

[@michaeleichner7522]

Would you recommend keeping your encryption passkey in 1Password? If so, since it’s not really a login, would you keep it in the secure notes category or would you keep it in the login category? Thanks

[@kalats]

Noticed you didn’t use Apple Mail or Calendar. Wondering what do you use for email and calendar?

[@titalx7169]

Helo and Thanks for the explanation. Could you please tell me if screen sharing through iMessage from Mac to Mac is encrypted? Thanks 😊

[@fabio.esquivel]

This feature is still not available in Latin America, but I will use it once it is offered to us down here. Thanks for the clear explanation and instructions!

[@AllThingsSecured]

My pleasure, Fabio!

[@fabio.esquivel]

Update: The feature is available now and I tried to use it, but the iCloud app in Windows stopped working for me… A shame, I rely on it. I had to turn the feature off to make the app work again in Windows.

[@joeglennaz]

I haven’t even watched a video and I gave it away just because you’re covering topic. I wanted a simple easy explanation of this. I was aware it was available and haven’t taken the time to figure it out. Thank you for the video.

[@networknightmares7744]

If someone observes you entering your PIN code to unlock your phone, steals the phone then uses the PIN to change your AppleID password and changes the recovery key, what happens to all your data and how do you recover from that? Thanks

[@HersonJVillatoro]

Make it difficult for them to change it by blocking iCloud account changes. Settings > Screen Time Make sure your screen time passcode is different from your iPhone passcode. This is to prevent that thief from accessing the following control. Content & Privacy Restrictions > Passcode Changes > Don’t allow This is to prevent someone changing the passcode or face id. To change it after, just come back to this setting. Then go to Account Changes and tap Don’t Allow. This blocks access to the iCloud profile at the top of the main page in Settings. To access it later, just come back to this setting.

[@Damariobros]

If you have recovery key turned on, does Apple still let you use a recovery contact or is it completely blocked off like how Security Keys block off 2fa push notification Trusted Device codes?

[@HoracioMrJJimenez]

Dude.... you're good. Informative .... excellent delivery.

[@AllThingsSecured]

Glad it was helpful!

[@Bobalicious]

Is this something I need to bother with if I've turned all the iCloud settings off?

[@myokimaru]

good video, do i need to turn this ON even i don’t have icloud? i use my computer as a back up not on icloud.

[@davidthompson8364]

ADP not available in UK yet. Thanks anyway - will update when it is.

[@scottthomas5261]

Is our data in hide my email encrypted? Will the forwarding email addresses be encrypted? Will it be classed as a contact and therefore not encrypted? If it is, then it can be a good way of generating alias

[@richardkoolen8396]

Great video. Onze question: im running a apple Familiy Construction in oud household. If i encrypt my personal data would i be able to still have shared notes and pages documents wint my spouse? It recon you lose that functionality also?

[@williamjackson7530]

Would be curious to know what email and calendar provider:service you are using as your everyday.

[@vs_gaming3013]

As regards email, he mentioned that he uses Protonmail.

[@diggler64]

Im confused about the recovery contact... in order to offer that service this has to mean that Apple has a backdoor to regain access ... otherwise how would the recover contact help ? Your data is encrypted but Apple has a copy of the encryption key in order to let the recovery contact unlock/recover your account ? no ?

[@lily3g]

Thats where the recovery contact comes in place. It is basically a replacement for apple ,now it’s a trusted person that only you know that can give you the code to unlock your account;not apple anymore

[@mrsimon8682]

Hi Josh. Good to have you in 2023

[@AllThingsSecured]

Thanks so much!

[@riblets1968]

The obstacle I face when attempting to enable this is a Macbook whose OS cannot be updated to a version that is suitable for Advanced Data Protection. I'll prolly have to create a new iCloud account for it as I can think of no other way around it.

[@XHItube]

I cannot access Drive and Photos through the web, since I activated it. I get the notifications, but allowing access results in nothing.. I take the additional security, but I'm genuinely peeved this isn't working. Does anyone have the same issue? Is there a fix?

[@martarivera9779]

I was about to change it, but after viewing your video my mind turned around with a big STOP!

[@denniss1211]

Hotel room is a very go analogy. I would add that with the vault items that a lost key the items are lost forever... suggest everything in the vault is automatically destroyed when you check out.

[@JP-fv1id]

Thanks I wish I knew this sooner

[@michaeleichner7522]

Before I go through the setup process I was wondering if the recovery key had to be 28 characters long? I’d like to use a variation of a different recovery key that I use which is 20 characters long. Am I correct that turning this on encrypts my notes and my photos, and nothing else? Thanks

[@WBTat2]

Won’t lie I come to KZbin for almost everything update, new device, or new feature and you’re the first one I subscribe to and hit the like button on. I used to not really care much about security on the phones always thought good luck I don’t have anything to steal…. Then my fb was hacked AND DELETED within the hour. Meta couldn’t find it nothing I was on the phone with them for a week on and off. it WAS GONE. Had people in high security positions confused no one could even find a hashtag to it. Became paranoid cause I booked 3-5 people a a day with 100$ deposits do the math. Who can loose 3-500 a day out their pay and be fine. Needless to say I have every security feature for every single angle and aspect of every app and Apple….. all the way to external security keys that’s 100% NEW to me.

[@michaelpysh8469]

yay, Not available in my country which is Canada. But thanks for the info. I'll turn it when "they" let me😒

[@TheLifeOnHigh]

Thank you for this common sense explanation of the pros and cons of this addition step.

[@David-k8p8g]

What apps do you use that are Not protected by advanced security features?

[@kittieking6027]

could this encryption app eventually cause my phone to go into SOS only when my prepaid at&t minutes expire? and what happens if i turn it off and i forgot my key but i do have a backup contact set up. i don’t remember setting this up and if i have other devices linked to it, 1) my lenovo laptop is apparantly corrupted and i also had microsoft onedrive app on this phone, which i believe has corrupted files on it. what can i do?

[@That_Dan_Guy_]

I would turn it on, but it is not available in Australia yet.

[@AllThingsSecured]

Not yet. But coming.

[@Rocksolidhandyman]

You forgot to mention the screen time passcode that keeps hackers from locking you out! That’s a big omission and leaves people only following these steps 100% vulnerable to passcode thieves!

[@lorettahall1841]

I believe my phone has been “cloaned” or as I was told someone made a ghost phone of mine! It all has sent me through an emotional roller coaster! How can I find out who may have done so or what can I do to fix this problem? Is it possible for me undo? I hope u can help me get piece of mind again!

[@Super-360]

So I'm curious is it at all possible for a recovery contact to be social engineered to get into a apple account sir?

[@Maxdrenchhim]

It won’t let me do any of this even tho my phones updated to ios18 it says something about end to end encryption

[@kindatodd3988]

I'm trying to turn on the advance but it's saying there was problem

[@MrMarbles]

I’m on ios 15. Not gonna update since I don’t use icloud anyway.

[@mistymu8154]

Advanced Data Protection was enabled in the UK on iOS 16.3. I am guessing that includes some other countries.

[@Bambotb]

Thoughts on samsung message guard ? How do you protect from pegasus?

[@richardharker2775]

It annoys me that nefarious institutions steal my personal information either bluntly or by trickery (read: terms and conditions) and then make money out of it. It bothers me just as much the fear of losing the encryption key. I did this once with my computer before going away on holidays knowing I "should" remember the key. Lately I don't trust anyone and especially any cloud services.

[@AllThingsSecured]

It’s a challenge.

[@vishousgamer]

I was thinking about turning this on, but for right now I'll off on doing that

[@shannonmcknight4196]

I have a new iPhone getting delivered next week by doing this when I transfer everything to the new iPhone will all my apps already be logged in? I know all my passwords but I have one app purple player which is logged in using a friends details but I won't be able to ask my friend to re log in as we have fallen out

[@AllThingsSecured]

No, you will likely be logged out of all apps when you move to a new phone.

[@johnswift376]

It's not available in the UK

[@frankfurter7260]

I set this up weeks ago and it didn’t take very long. I’m going to add you as a trusted recovery contact so please accept the modest assignment. I do not recommend it to my folks or some friends because I know they will lose their iCloud password and I don’t want to be blamed when they lose access to all their info and the recovery contact process fails.

[@AllThingsSecured]

Congrats on getting it set up!

[@molton3631]

I’m in the US and have been getting a “Something Went Wrong: There was a problem turning on Advanced Data Protection. Try again later.” Since the initial release. Does anyone know how to fix this?

[@grow-evolve]

I’m tempted and I am into privacy as a right etc but I have not bothered too I am more concerned losing all my data and losing my keys to the data

[@diomenezes]

Advanced Data Protection is NOT yet available in your Country or region --> BRAZIL :(

[@powerfile8]

I won't activate it because I don't want to remove old devices from my ID list. I love to see my huge amount of products going back some years.

[@Elcaptcook]

I have an issue with my Yubikeys 5c usb c my MacBook does not recognize them.

[@adnan77w17]

Thank you for the information, but I did the protection feature provided for the data, then recover the account, then the recovery key, which consists of 28 characters. After what I did, I went to format the iPhone, and after formatting it, I want to return the data to the iPhone. The device cancels this feature

[@billymink]

You really could have " cut to the case" as thay say raster...is this vanity on your part. Love seeing yourself on some utube vidio , it's very theatrical !

[@brendantriv9785]

What mail service do you like to use ?

[@Braddeman]

They do this but allow users to change their password with a pin if someone steals their phone and pin they can hijack not only their phone but also change the password to remove find my and hijack the icloud account. Apple needs to fix this. I just added 2 yubikeys to my phone as well to increase security.

[@sandeguzman]

Same question here @allthingsecured.. can you please explain how the process for recovering an account works? I’m worried since if someone Acces a recovery contact phone, they can eaasily ask for a code, and they’ve have already the owners account mail. Easy for them to hijack the account with success… so, ¿are there any additional steps after an account recovery code is used)

[@ryaniglesias6381]

it says Advanced Data Protection is not yet available in my region so unfortunately I have to wait :(

[@AllThingsSecured]

Hopefully not a long wait 🙏

[@oscs4556]

currently only available in USA unless it’s a new Apple device until February 2023 - just in case, people locked themselves without a recovery key or contract. Should be rolled out globally in early 2023. Btw, I’m in Australia and it’s not available here yet too.

[@miketech79]

Full End-End encryption Does not work if you use iCloud for Windows.

[@pams3887]

I have no idea what I’m doing wrong; I re-enter the entire recovery key EXACTLY and it says the key is incorrect…….even when I can see it’s identical 🤔

[@BobJones-dq9mx]

Good practical advise.

[@AllThingsSecured]

I hope you’re able to make good use of it.

[@deadbydead]

you can make it happened if one of you machines have older os like Monterey

[@sergio223-b3s]

If I turn it on then I can’t sign into my I cloud on my 2017 Mac book air

[@alanjackson6131]

Me being old school and having enough problems with having to use so many special passwords this is a no option for me.

[@joshy9124]

i tried turning this on last year after my phone updated and it said i had to wait for a certain date like march or february of this year im in the US.

[@ozb10]

Can this keep plaid away from entering our banks since we connect our bank via plaid . Crypto purchasing for example

[@AllThingsSecured]

No, these are different. The only way to keep Plaid away from your bank is to stop using services that connect via Plaid.

[@hugo3796]

Where do y’all store the 28 character recovery key?

[@alwably]

my device is updated and I did't find it. maybe it's not available for all countries.

[@joshiniowa]

I got a message stating that my device is too new to enable this feature. I have to wait until the end of January to be eligible. This is apparently for "my protection".

[@specialk9999]

I got that too on my iMac. If you have an older device that’s signed in with the same Apple ID, you can turn it on from the older device and it will automatically turn it on your new device.

[@AllThingsSecured]

Too new? I’ve never heard that one before. Weird.

[@joshiniowa]

@@AllThingsSecured I imagine it’s to prevent people from buying a new device and using your Apple ID to hold your data ransom?

[@herefobeer]

Absolute encryption requires an absolute backup strategy. Most people won’t think about backing up what’s already on the cloud. E2E/C2E means you have security of local data, with backup safety of the same level. Get mugged and lose all your Apple devices, it’s as good as losing your only ssd with all your data. Gone forever.

[@shadow.banned]

Wait... what does the policy print say about E2E encryption _if you don't pay._ If you forget to pay for iCloud or overdraft on the storage, then what?

[@AllThingsSecured]

I’m sure it’s the same as if you fill up your iCloud and then stop paying. You don’t lose the data, you simply can no longer add to it or really update the data.

[@jippalippa]

Gotta wait for that "early 2023" in my country. However among the EU my country is one of the first to get these updates.

[@AllThingsSecured]

Sorry about that. When it comes, make sure you do it!

[@Marcel-dd9ch]

And there were no problems afterwards? Is navigating trough Apple Photos still as fast as before? Can you still search for photo shoot locations etc? I had 42,000 photos and videos on Google Photos and I'm currently testing Ente Photos with E2EE. Many things are more difficult to develop, if you're using E2EE. With Google Photos you can search for "food" and will only get photos with "food" on them. How about Apple Photos? Just for my own interest.

[@AllThingsSecured]

I haven’t noticed any change in speed or search so far, but I don’t have as many photos as you do.

[@frankfurter7260]

I have around 60,000 photos and videos in Apple Photos/iCloud. ADP has no impact on performance that I can discern. I recommend Adobe Lightroom Classic if you’re serious about managing and working with large photo collections not Apple Photos/iCloud.

[@Marcel-dd9ch]

@@frankfurter7260 Apple still doesn't encrypt several meta data of photos, videos and some more things. So it's no surprise, that things like the search dunction is still quick. For me, not encrypring the meta data is a no go. I use and will still use alternatives to the iCloud. Yes, using Lightroom classic locally is one good alternative.

[@joeyappleseed3158]

So do you store this code on your phone or any safe place you choose?

[@jenniferk8033]

I suppose since Notes are encrypted, you could keep the code in your Notes with a a password lock?

[@TheGregHolbrook]

great info but I just found out this feature on available in the US. Apple help desk said they didn't know when it would be available outside the US. Maybe a follow-up reminder when you learn it is available worldwide. I live in Australia. Your content and info is A+

[@AllThingsSecured]

Yea, I didn't realize that when I first published this, but I know that it's coming!

[@arifulislamleeton]

Thank you very much

[@diashere875]

Not yet on some country

[@grzegorzw3076]

It’s not available in Europe…

[@AllThingsSecured]

Sorry you have to wait.

[@makofinn6007]

What if you don’t use iCloud

[@mr.solace5759]

Not available in my country.

[@AllThingsSecured]

Hopefully soon.

[@velshock]

You could also move to a safer country with actual privacy laws.

[@thekid4779]

Does help if you’re hacked though.

[@rudester7557]

Don’t want to enable 2FA so no go for me.

[@mrcombiBedford]

Can we also backup to external hard drive?🤔

[@AllThingsSecured]

Backup what data?

[@mrcombiBedford]

all of it Doc's fotos etc. as we do time machine, I have 2 H drives@@AllThingsSecured

[@mydevices768]

The KEY is generated by Apple, how do I know they don't have a copy?

[@pedzsan]

Even if your data is in the cloud, you still should have a backup. That backup is (by definition) *all* of your data. And assuming that you can unlock the backup, that is a way to recover all of your data even if you lose your iCloud password.

[@simonac688.]

great tuto easy peasy 👍

[@jenniferk8033]

I got an error. "Something Went Wrong"

[@elmin2323]

Does Google offer anything like this?

[@AllThingsSecured]

Not that I’m aware of.

[@oskarlip8325]

If you are going to turn it on then you wouldn’t receive notifications from your Apple Watch about calls

[@Joshman601]

They won’t let me activate it on my iPhone SE 2020. It keeps saying error. I have been trying for months. They probably want me to buy a new iphone before they allow it. Classic Apple.