Skip to content

Technology and money in plain English · Since 2012

Tech
Guide

iCloud Public Links Will Be Checked for Harmful Content: What Apple Says

Apple will check photos and files shared through iCloud public links for harmful content starting with the 27.3 releases. Here is what is covered, what Apple has not said and how to switch a link to private sharing.

Key facts

  • Apple will check items shared with "Anyone with the link" starting with the 27.3 releases. As of
  • Items shared with "People You Choose" or sent with Send a Copy are not described as covered. As of
  • Apple has not defined harmful content or said whether older links are checked. As of
  • Apple says public content is no longer end-to-end encrypted, even with Advanced Data Protection. As of
  • 27.3 is in developer beta; a public release is expected in December. As of
In this story7 sections
Smartphone showing a photo app beside a memory card, illustrating iCloud public links sharing
Image: Leeloo The First / Pexels
Listen to this article
7 min listenTech

Last checked . Picks are based on the prices, rates, fees and terms each provider publishes, checked at the source. We never rank products by commission. See how we’re funded.

Apple will begin checking iCloud public links for harmful content with the 27.3 releases of iOS, iPadOS, macOS and visionOS, according to MacRumors. The check covers photos and files shared with the “Anyone with the link” option. Items shared with chosen people are described as outside it. The software is in developer beta, and MacRumors reports a public release is expected in December. This guide covers what is known about the iCloud public links check, what Apple has not said and how to switch a shared item to private access.

9to5Mac says the change was disclosed in a newly published Apple support document and not in a formal terms update. Per that document, items shared through “Anyone with the link” will be checked for harmful content beginning with the 27.3 operating systems. MacRumors reports that images in iCloud Photos and files in iCloud Drive shared this way will be made accessible to Apple for the check.

Apple has not defined harmful content. MacRumors suggests it could include malware, malicious files or child sexual abuse material, since Apple’s document mentions law enforcement. That reading is MacRumors’ inference and not an Apple statement. 9to5Mac adds that the article it reviewed does not say how the checks work or whether they are automated or reviewed by people.

Advertisement

What is and is not checked

MacRumors describes two groups of sharing methods: iCloud public links and private shares. The table below summarizes the Jolt Journal’s reading of those reports.

How an item is shared Covered by the new check Source
Link set to “Anyone with the link” Yes, from 27.3 MacRumors, 9to5Mac
Link set to “People you choose” Not described as covered MacRumors, 9to5Mac
File sent with “Send a Copy” Not described as covered MacRumors
Links created before 27.3 Unclear MacRumors

The last row matters for anyone with old iCloud public links still active. MacRumors reports that Apple has not said whether links created before the 27.3 updates will be checked. Until Apple answers, the safer reading is that an old public link could be treated the same as a new one.

MacRumors quotes Apple’s document as saying that Apple may move, refuse, modify, remove or delete content found to be harmful. It may also act against the Apple Account of the person who uploaded it, including blocking or disabling the account. The document says Apple may also block new accounts tied to the same email address or phone number, and may involve law enforcement if necessary. MacRumors reports no specific enforcement cases.

Encryption is the second point. MacRumors reports Apple saying that content made available to anyone is no longer end-to-end encrypted, even when Advanced Data Protection is turned on. Public iCloud links therefore carry a different privacy profile from a private share, regardless of the account’s encryption settings.

An Inc. column by Jason Aten argues that the practice is not especially controversial, because content meant for anyone with a link carries little expectation of privacy. The column says the real problem is that Apple has not published its criteria or explained its methods. It adds that most users will never be flagged and may never know the check occurs, and it ties the change to earlier pressure on Apple over child safety material.

The column also treats the iCloud public links check as separate from Apple’s earlier refusal to build a backdoor into encryption. That is the author’s framing. Apple has not published a statement connecting the two.

Apple’s iCloud User Guide describes the steps for iCloud Drive on the web. Sign in at icloud.com/iclouddrive. Select the More button next to the file or folder, then choose Share, then Manage Shared File or Manage Shared Folder. Select Sharing Options and choose “People You Choose” in place of “Anyone with the Link.” That moves an item out of the group of iCloud public links.

The same guide lists a few rules. Only the owner can stop sharing, and the Stop Sharing option ends access for everyone. A single file inside a shared folder cannot have its own setting, so the folder’s setting applies. To stop sharing one file without changing the folder, the guide says to move the file to a folder that has not been shared. Stopping sharing or deleting a shared folder prevents participants from viewing or editing its files.

The guide page reviewed covers iCloud Drive on the web. The sources reviewed for this article do not give separate steps for links created from the Photos app, so the Photos steps are best confirmed in Apple’s own support pages.

What to check before the 27.3 release

Three checks follow from the reporting. The first is a list of active iCloud public links, since Apple has not said whether older links are included. The second is whether each link still needs to be public or whether “People You Choose” would serve the same purpose. The third is whether anything shared publicly should not be, given that public content is not end-to-end encrypted.

The Jolt Journal’s guide to how to update Chrome covers another update that arrives only once the user acts, and its report on Apple’s rewritten App Store guidelines covers a separate recent policy change from the company.

Editor’s take

The iCloud public links check is narrow in scope and broad in uncertainty. The scope is clear: items shared with “Anyone with the link.” The uncertainty covers how the check works, what counts as harmful and whether older links are included. For most people, switching a link to “People You Choose” removes the question for any item that never needed to be public. For items that must stay public, the practical step is to treat them as accessible to Apple, because Apple says they are no longer end-to-end encrypted. Anyone with a long list of iCloud public links has the most to review.

This is general information, not legal or security advice. Apple’s support documents have the final word on how iCloud sharing and the new check work.

See something that needs fixing? Report an error

Get The Jolt Journal in your inbox

The day’s top stories in tech, finance and AI, picked by our editors. Free.

Up next

Keep reading

Add The Jolt Journal as a preferred source on Google

Add The Jolt Journal to your Home Screen to get alerts

  • 82 Stories published

Jolt Journal Tech covers artificial intelligence, software, devices, cybersecurity and the platforms that shape how we live and work. Every story is checked against its sources and reviewed by our editor before publication.

Covers

Most Popular

More in Tech

See all

Leave a comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Breaking-news alerts

We’ll send a notification to this device when a big story breaks. Choose what you want, then allow notifications when your browser asks. You can change this or turn alerts off any time.

Send me