iOS 27.3 Will Check Public iCloud Links: What to Use Instead

Published November 12, 2026 · Updated November 12, 2026 · 7 min read · by the Sakura5 team

Starting with iOS, iPadOS, macOS and visionOS 27.3, Apple will check items shared with “Anyone with the Link” in iCloud for harmful content, and those items are no longer end-to-end encrypted. That is the plain reading of Apple’s support article, published on November 3, 2026. This post sets out what Apple actually says, what is only reported by the press, which questions are still open, and what to use instead for ordinary sensitive files such as ID scans, contracts, medical letters and tax papers.

The context matters. The change is part of the effort to fight child sexual abuse material (CSAM), and that is a goal worth supporting. Press reports link the move to calls for action on CSAM, but Apple itself only says “harmful content”. Nothing here is about avoiding Apple’s checks. The practical point is narrower: a public link is not end-to-end encrypted and anyone who has the link can open it, so documents that are private but perfectly legal deserve a better channel.

What Apple says

Everything in this section comes from Apple’s own article.

• It applies to iOS, iPadOS, macOS and visionOS 27.3 or later.
• “Items shared using Anyone with the Link will be checked by Apple for harmful content.”
• Share a Link offers People you choose or Anyone with the link. The second option makes the item available to anyone who has the link, including Apple.
• The item “is no longer end-to-end encrypted, even if the owner or participants have turned on Advanced Data Protection”.
• Apple reserves the right to move, refuse, modify, remove or delete the content at any time. It may also block or disable the Apple Account, block new accounts tied to the same email address or phone number, and involve law enforcement if necessary.
• Not every feature is available in every country or region.

What is reported, not confirmed

Press coverage says the 27.3 updates were in developer beta, with a public release expected in December 2026. Reporters also say private iCloud libraries, People you choose links and Send a Copy are not covered. Those points come from outlets such as The Register, Bitdefender and Ente, not from Apple’s text, so treat them as reporting. One more detail: public links were already outside end-to-end encryption before this change. What is new is the content check.

Questions Apple has not answered

1. How does the check work? Automated scanning or human review is not stated.
2. What counts as harmful? Apple gives no definition. Some reporters suggest CSAM, malware and other unlawful content, but that is their reading.
3. Are links created before 27.3 checked? Apple has not said.
4. Is there an appeal? The article describes no process for a wrongly flagged item or a blocked account.
5. Where and when does it roll out? Exact timing by country or region is unclear.

Because of these gaps, the safest approach is not to guess. Review the links you have shared and stop sharing the ones you no longer need. Our step-by-step guide on how to find and stop sharing old iCloud links walks through it.

Public link or invited people: what changes

A public link is a bearer token: whoever holds it gets in, and forwarding it costs nothing. Sharing with People you choose limits access to the people you invite. Apple’s article does not describe those links as checked, and press reports agree. We compare the two in detail in iCloud public link vs People you choose, and look at whether encryption options help in does Advanced Data Protection cover public iCloud links. The short answer from Apple’s text is no: a public link leaves end-to-end encryption even with Advanced Data Protection on.

What to use instead for sensitive files

None of these are workarounds for anything. They are ordinary good practice for ID scans, contracts, medical records and tax documents.

• Invited people only. Share with named people rather than anyone with a link.
• An end-to-end encrypted messenger. WhatsApp and Signal both describe end-to-end encryption for messages and attachments.
• A password-protected ZIP. An AES-256 archive stays unreadable without the password. Send the password in a different app from the file. Our guide on encrypted ZIP vs an iCloud public link explains the trade-offs.
• Clean the file first. Photos carry GPS location, device model and dates; documents carry author names. Remove them before you send.
• Private storage for what you keep. Locked Notes, the Hidden album and vault apps protect different things. See Notes lock vs Hidden album vs a private vault app.

For specific cases, there are guides on the safest ways to send an ID scan from iPhone and sharing tax, medical and contract documents privately. Earlier explainers cover Apple’s announcement, whether an iCloud link is private and how to share from iPhone without a public link. We also covered the topic in Apple will check public iCloud links: keep your photos private.

Where Filevale fits

Filevale is our file toolkit for iPhone and the web. The App Store listing says it processes files on the device, collects no data, and can create ZIP files with an optional AES-256 password. The app includes a Vault with a pattern lock and a 12-word recovery key, a “Share privately” option that makes an AES-256 encrypted ZIP (Pro), an iCloud Vault backup to your own iCloud (Pro), and a Privacy hub. Pro is a paid upgrade; the app lists its current plans on the App Store. If you forget your passcode and lose the recovery key, the vault cannot be opened, so store the 12 words somewhere safe. Competing options such as Proton Drive, Cryptomator or locked Notes have their own strengths, and our review of private vault apps for iPhone compares them honestly.

FAQ

Does Apple scan my whole iCloud library now?

Apple’s article covers only items shared with Anyone with the Link from version 27.3. Press reports say private iCloud libraries are not covered. Apple does not describe checks on files you simply keep in iCloud, but it also has not answered every question about how the system works.

Does Advanced Data Protection keep a public link private?

No. Apple states that an item shared with Anyone with the Link is no longer end-to-end encrypted, even if Advanced Data Protection is turned on. The link gives anyone who holds it access, including Apple. Advanced Data Protection still covers your other supported iCloud data.

Are old iCloud links affected?

Apple has not said whether links created before 27.3 are checked. Rather than guess, open the Files app, find items you share, and stop sharing links you no longer need. Anything left on a public link should be something you would be comfortable having open to anyone.

What is the safest way to send an ID scan?

Use an end-to-end encrypted messenger or sharing limited to invited people, strip location data first, and consider a password-protected AES-256 ZIP with the password sent in a different app. Avoid public links for anything that identifies you.

← All articles