Apple Will Check Every Public iCloud Link for Harmful Content: What to Do

From iOS 27.3, Apple will check every photo and file shared through a public iCloud link for harmful content, and it can disable the accounts behind it. Apple may also delete flagged items and, "if necessary", involve law enforcement, yet it does not say what counts as harmful. If you share private photos or documents, the safe move is simple: stop using public links for them, share with invited people only, and lock the file with a password before it leaves your device.

What Apple announced

In a support article published on November 3, 2026, Apple explains that a photo in iCloud Photos or a file in iCloud Drive shared with Anyone with the Link is made accessible to Apple to check for harmful content, starting with iOS, iPadOS, macOS and visionOS 27.3. Such an item is also no longer end-to-end encrypted, even if Advanced Data Protection is turned on.

Apple says it may "move, refuse, modify, remove, or delete the content at any time". It may also take action against the Apple Account involved, including blocking or disabling it, blocking a new account with the same email address or phone number, or, "if necessary, involving law enforcement".

What Apple did not say

• What "harmful" means. The article gives no list or examples. Reporters have guessed malware or abuse material, but that is their reading, not Apple's.
• Whether old links count. Apple does not say if links created before 27.3 are checked.
• How the check works. There is no detail on automated scanning versus human review.

The change does not apply to links shared with People you choose, or to files sent with Send a Copy. The 27.3 updates were in beta when the article was published.

Why it matters even if you share nothing bad

A public link is public: anyone who gets it can open the file, and now it is outside end-to-end encryption too. Family photos, IDs, contracts, medical letters and payslips are not harmful, but they are private. Treat every Anyone with the Link item as something you would be comfortable posting online.

How to share private files safely

1. In the share options, pick People you choose instead of Anyone with the Link, or use Send a Copy to send the file itself.
2. Remove hidden details first: photos carry GPS location, the phone model and the date, and documents carry the author's name.
3. Lock the file with a password so only the people you trust can open it, wherever it ends up.
4. Send the password in a different app or by phone, never next to the file.

Lock a file with a password

Password-Protect ZIP packs any files into a ZIP encrypted with AES-256 on your device. Drop the files, enter a password, click Encrypt, and share the ZIP instead of the originals. The person you share with opens it with 7-Zip or WinRAR on Windows, The Unarchiver or Keka on Mac, most Android file managers, or Filevale's Unzip tool. For a single document, Password Protect PDF locks the PDF itself.

Remove location and author details

Remove Metadata clears GPS location, camera, dates and author details from photos, videos, PDFs and Office files and gives you a clean copy; for photos only, Remove EXIF Data from Photos keeps every pixel. More on the sharing options in Is an iCloud link private? and how to share files privately from iPhone without a public link.

Frequently asked questions