Starting with iOS 27.3, Apple will check anything you share from iCloud with Anyone with the Link for harmful content. Your private library isn’t affected, and neither are links set to People you choose.
Public links were already outside end-to-end encryption, even with Advanced Data Protection turned on. What’s new is that Apple now says it will check what’s in them.
The short answer
- The checks apply only to items shared with Anyone with the Link. Your private library and People you choose links are not covered.
- Public iCloud links were already outside end-to-end encryption, even with Advanced Data Protection. What’s new in 27.3 is that Apple says it will check them for harmful content.
- Apple’s support page does not define “harmful content.” If content is flagged, Apple says it may remove it or take action on the Apple Account.
- Ente public links stay end-to-end encrypted. The album’s key sits in the URL fragment (
#...); browsers don’t send that part to servers.
What Apple is changing
Apple’s support document says that on iOS, iPadOS, macOS and visionOS 27.3 or later, items shared with Anyone with the Link “will be checked by Apple for harmful content.” Its examples are a photo in iCloud Photos and a file in iCloud Drive.
iCloud link sharing has two access settings, and only one of them is checked:
| Access setting | Who can open it | Checked from 27.3? |
|---|---|---|
| People you choose | Only people you invite or approve | ❌ No |
| Anyone with the Link | Anyone who has the link, and Apple | ✅ Yes |
Sending a copy, rather than sharing a link, is separate and isn’t covered.
Note: Apple hasn’t said whether links created before 27.3 will be checked once devices update.
Why Apple can check these links
Apple says that when you share with Anyone with the Link, “to facilitate that sharing, the item is no longer end-to-end encrypted, even if the owner or participants have turned on Advanced Data Protection.”
That was already true before 27.3. Because the item isn’t end-to-end encrypted, Apple can read it. iOS 27.3 doesn’t change the encryption. It changes what Apple says it will do with access it already had. For more on why it matters who holds the key, see The key question behind iCloud Photos.
What happens if content is flagged
Apple says it may move, refuse, modify, remove or delete the content at any time. It may also block or disable your Apple Account, block new accounts that use the same email address or phone number, and involve law enforcement if necessary.
The page doesn’t define “harmful content” or explain how the checks work.
How Ente public links compare
Ente public links also open in any browser, but they stay end-to-end encrypted. The album’s key sits in the part of the link after the # (the URL fragment). Browsers don’t send that part to servers, so Ente only stores encrypted data it can’t read.
| Feature | Ente Photos public link | iCloud Anyone with the Link |
|---|---|---|
| End-to-end encrypted | ✅ Yes: key in the URL fragment (1) | ❌ No: even with Advanced Data Protection (2) |
| Provider can read the files | ❌ No | ✅ Yes |
| Content checks by the provider | ❌ No: Ente can’t decrypt them | ✅ Yes: from 27.3 |
| Share without a public link | ✅ Yes: with other Ente users | ✅ Yes: with People you choose |
- The album key sits in the URL fragment after
#. Fragments stay on the client, so Ente never gets the key. Anyone with the full link can decrypt; Ente can’t. See the architecture page. - Apple’s support document: public-link items aren’t end-to-end encrypted, including with Advanced Data Protection on.
For a wider comparison, see Ente Photos vs Apple Photos.
Before you share a link
- Check who it’s for. If it’s only for people you know, use People you choose on iCloud, or share directly with other Ente users.
- Treat a public link as public. Anyone who has it can open it, on Ente as well as on iCloud. Don’t paste a link to a sensitive album into a big group chat.
- Use link controls. Ente links can have a password, an expiry date and a device limit. On the free plan, links are limited to 10 devices. See Ente’s public-link help.
- Remember that turning off a link doesn’t delete anything. The photos stay in your library. iOS 27 Shared Albums have their own storage and expiry rules.
FAQ
Does Apple check my whole iCloud Photos library?
No. The checks apply only to items shared with Anyone with the Link.
Are public iCloud links end-to-end encrypted with Advanced Data Protection on?
No. That was already the case before 27.3. What 27.3 adds is the content checks.
Are Ente public links end-to-end encrypted?
Yes. The key is in the link, so anyone with the full link can view the album, but Ente only stores encrypted data. For anything sensitive, add a password, an expiry date and a device limit.
A public link is a convenience feature. On iCloud, 27.3 makes the policy side of that choice explicit. On Ente, the same convenience keeps the key off the server.
Last verified: November 2026