Apple Will Check Public iCloud Links: Keep Your Photos Private

Published November 8, 2026 · Updated November 8, 2026 · 6 min read · by the Sakura5 team

Apple will check every photo and file shared through a public iCloud link for harmful content, starting with iOS 27.3, and it can disable the Apple Account behind a flagged link. Apple may also delete flagged items and, "if necessary", involve law enforcement. What it does not say is what counts as harmful. If you share family photos, IDs or documents from your iPhone, here is what changed and a short checklist to keep them private.

What changed in iOS 27.3

Apple's support article, published on November 3, 2026, covers items shared with Anyone with the Link: a photo in iCloud Photos or a file in iCloud Drive. In iOS, iPadOS, macOS and visionOS 27.3 or later, such an item "is made accessible to Apple to check for harmful content", and it is no longer end-to-end encrypted, even if Advanced Data Protection is on.

Apple reserves the right to "move, refuse, modify, remove, or delete the content at any time". It may block or disable the Apple Account involved, block a new account with the same email address or phone number, and, if necessary, involve law enforcement.

What stays the same

• People you choose links, where only invited people can open the item, are not part of the change.
• Send a Copy, which sends the file itself, is not part of it either.
• Apple does not describe checks on photos you simply keep in iCloud.

Still unclear: whether links created before 27.3 are included, and how the check works. The 27.3 updates were in beta when the article was published.

A five-minute privacy checklist for iPhone

1. Review what you share. In the Files app, open Shared to see the iCloud Drive items you share, and stop sharing private ones that use Anyone with the Link.
2. Share with invited people. When you share from iCloud, open the share options and choose People you choose, or send a copy.
3. Strip the location. In the Photos share sheet, tap Options and turn off Location, or clean the file first so the GPS spot, phone model and date are gone.
4. Lock sensitive files with a password. A password-protected ZIP or PDF stays unreadable to anyone without the password, wherever the file ends up.
5. Send the password separately. Use another app or a phone call, never the same message as the file.

Tools that help

Filevale is our file toolkit for iPhone and the web. On filevale.com you can pack photos and documents into a ZIP encrypted with AES-256, lock a PDF with a password, and remove GPS location, camera and author details from photos, videos and documents. The files are processed on your device, not uploaded. For a step-by-step version of this checklist, see Filevale's guide Apple will check every public iCloud link for harmful content.

FAQ

Does Apple now check all my iCloud photos?

Apple's article is about items shared with Anyone with the Link from version 27.3. It says People you choose and Send a Copy are not affected, and it does not describe checks on photos you only keep in iCloud.

Why lock a file if I share it with invited people only?

Invites limit who can open the link, but files get forwarded, downloaded and re-shared. A password keeps the content private even after it leaves the people you invited.

What does Apple mean by harmful content?

Apple does not define it in the article. Reporters have suggested malware or abuse material, but that is their reading, not Apple's wording.

← All articles