Users are given crucial new capabilities via iMessage Contact Key Verification, Security Keys for Apple ID, and Advanced Data Protection for iCloud to safeguard their most private information and communications.
As the latest step in its continuous endeavor to provide people even better ways to secure their data, Apple today unveiled three cutting-edge security capabilities aimed at defending against attacks to user data in the cloud.
Users may confirm they are speaking exclusively with the people they wish to with the help of iMessage Contact Key Verification.
Users can choose to require a physical security key to sign in to their Apple ID account with Security Keys for Apple ID.
Users may choose to further safeguard sensitive iCloud data, such as iCloud Backup, Photos, Notes, and more, with Advanced Data Protection for iCloud, which employs end-to-end encryption to give Apple’s highest level of cloud data protection.
With best-in-class device encryption and data protections built directly into our custom chips, as well as features like Lockdown Mode, which provides an extremely high level of optional security for users like journalists, human rights activists, and diplomats, these new features join a suite of other safeguards that make Apple products the most secure on the market.
Apple is dedicated to enhancing security on devices and in the cloud, as well as to continuously introducing additional safeguards.
“At Apple, we are steadfast in our dedication to provide our customers the greatest data security available.
The senior vice president of software engineering at Apple, Craig Federighi, stated, “We continuously discover and mitigate emerging risks to their personal data on device and in the cloud.
Consumers will have three potent new tools to better safeguard their most sensitive data and communications with iMessage Contact Key Verification, Security Keys, and Advanced Data Protection for iCloud, according to Apple. “Our security teams work relentlessly to keep users’ data safe.”
Contact Key Verification for iMessage
With the introduction of iMessage, Apple set the standard for end-to-end encryption in consumer communication services, ensuring that messages could only be read by the sender and receivers.
Since its inception, FaceTime has also utilized encryption to safeguard the confidentiality of talks.
Users that confront severe digital dangers, including as journalists, human rights advocates, and members of the government, may now opt to further verify that they are talking solely with the persons they intend by using iMessage Contact Key Verification.
The great majority of users will never be the target of extremely sophisticated assaults, but for those who could be, the function offers a crucial extra degree of security.
Users who have activated iMessage Contact Key Verification will receive notifications for conversationsautomated warnings if a highly skilled opponent, such a state-sponsored attacker, were to ever be successful in breaking into cloud servers and putting their own device inside to eavesdrop on these encrypted conversations.
Safety Keys
In 2015, Apple made two-factor authentication for Apple ID available.
It is now the most used two-factor account security solution in the world that we are aware of, with over 95% of active iCloud accounts employing this protection.
Users now have the option to employ third-party hardware security keys to further this protection thanks to Security Keys.
This tool is intended for individuals who frequently experience targeted threats to their online accounts owing to their public personas, such as celebrities, journalists, and public officials.
By requiring a hardware security key as one of the two requirements for customers who want to participate, Security Keys improves Apple’s two-factor authentication.
This strengthens the security of our two-factor authentication and keeps even highly skilled attackers from acquiring
Advanced iCloud Data Protection
With the advanced file encryption mechanism included in the iPhone, iPad, and Mac, Data Protection, Apple has long provided the industry’s best data security on its products.
The most secure mobile devices are those made by Apple.
Ivan Krsti, Apple’s senior vice president of security engineering and architecture, stated that the company is now expanding on that strong basis.
Apple’s highest degree of cloud data security is called “Advanced Data Protection,” which gives customers the option to encrypt end-to-end the overwhelming majority of their most sensitive iCloud data so that it can only be decrypted on their trusted devices.
For users who want to participate, Advanced Data Protection keeps the majority of iCloud data secure even in the event of a cloud data breach.
Passwords stored in the iCloud Keychain and health information are two examples of the 14 critical data categories that iCloud already secures using end-to-end encryption by default.
The overall number of data types secured using end-to-end encryption for customers who choose Advanced Data Protection climbs to 23, including iCloud Backup, Notes, and Photos.
Due to the requirement for interoperability with the international email, contacts, and calendar systems, iCloud Mail, Contacts, and Calendar are the only main iCloud data categories that are not supported.
The Rising Threat to Consumer Data in the Cloud, a new review of data breach research, published today, demonstrates the urgent need for improved security for consumers’ data in the cloud.
According to experts, there were 1.1 billion personal information exposed globally in 2021 alone as a result of the overall number of data breaches more than tripling between 2013 and 2021.
End-to-end encryption is being more widely used by businesses in the technology sector as a response to this expanding danger.
Availability
In 2023, iMessage Contact Key Verification will be accessible worldwide.
Beginning in early 2023, Security Keys for Apple ID will be accessible worldwide.
Members of the Apple Beta Software Program may get Advanced Data Protection for iCloud in the US right now, and US customers will have access to it before the end of the year.
Beginning in early 2023, the function will be made available to the rest of the globe.
Our Platform Security Guide and the data breach study “The Rising Threat to Consumer Data in the Cloud” by Dr. Stuart Madnick, professor emeritus at MIT Sloan School of Management, can both be found online for more information on the technical details of the optional security enhancements provided by Advanced Data Protection.
