End-to-end encryption
Also known as: E2EE, end-to-end encrypted backup, what is end-to-end encryption
End-to-end encryption (E2EE) scrambles data so only your devices hold the keys to read it — not even the service storing it can. It protects messages, backups, and cloud files, but means a lost key can make data unrecoverable.
- Only your devices hold the decryption keys
- The provider stores data it cannot read
- Lost keys can make data permanently unrecoverable
How E2EE works
With end-to-end encryption, data is encrypted on your device before it leaves and can only be decrypted by you or the intended recipient. The cloud or messaging provider stores the scrambled version and never holds the keys, so even the company — or anyone who breaches it — cannot read your content.
This differs from ordinary "encrypted in transit and at rest," where the provider can still access your data because it controls the keys. E2EE moves that trust entirely to your devices.
E2EE for backups and cloud storage
Apple’s Advanced Data Protection (in Settings > [your name] > iCloud > Advanced Data Protection) extends end-to-end encryption to most iCloud categories, including device backups and Photos. Many messaging apps encrypt chats end-to-end by default. The trade-off is recovery: because only you hold the keys, losing them — with no recovery contact or key set up — can mean the data is gone for good.