An iCloud link set to Anyone with the Link is not private: anyone who gets the link can open the file, and from iOS 27.3 Apple says it can check that content too. If you only want specific people to see a file, share it with People you choose, send a copy instead of a link, or lock the file with a password before it goes anywhere. This guide explains the change and the simple ways to keep a shared file private.
What Apple changed in iOS 27.3
In a support article published on November 3, 2026, Apple says that in iOS, iPadOS, macOS and visionOS 27.3 or later, a photo in iCloud Photos or a file in iCloud Drive shared with Anyone with the Link is made accessible to Apple to check for harmful content. Such an item is also no longer end-to-end encrypted, even if Advanced Data Protection is turned on.
The change does not cover links shared with People you choose, or files you send directly with Send a Copy. Apple does not say whether links created before 27.3 are included, and the 27.3 updates were still in beta when the article was published. What Apple can do about flagged items, and what it leaves undefined, is covered in Apple will check every public iCloud link for harmful content.
Pick the right way to share
- People you choose: only people you invite can open the item. Use it when you know who should see the file.
- Send a Copy: sends the file itself, for example in Mail or Messages, so there is no public link at all.
- Anyone with the Link: fine for things you would happily post publicly, such as a flyer or a menu. Treat it as public.
Lock the file with a password first
Password-Protect ZIPEncrypt files into a password-protected ZIP with AES-256 in your browser. The password and files never leave your device.Open toolA password protects the file wherever it ends up: in a link, an email attachment or a shared folder. Only people who know the password can open what is inside.
- Open Password-Protect ZIP and drop in the files. Any type of file works.
- Enter a password, then click Encrypt. The files are packed into a ZIP encrypted with AES-256 on your device.
- Download the ZIP and share that instead of the originals.
- Send the password separately, for example by phone or in a different app, never in the same message as the file.
The person you share with can open the ZIP with 7-Zip or WinRAR on Windows, The Unarchiver or Keka on Mac, most file managers on Android, or Filevale's Unzip tool in any browser.
For a single document, Password Protect PDF locks the PDF itself with AES-256, so it opens in any PDF reader after the password is entered.
Remove hidden details before you share
Remove MetadataRemove hidden metadata before you share a file: GPS location and camera from photos and videos, author and company from PDF, Word, Excel and PowerPoint. Runs in your browser.Open toolPhotos and videos often carry the GPS spot where they were taken, the phone model and the date. Documents can carry the author's name and company. Remove Metadata deletes these from photos, videos, PDFs and Office files and gives you a clean copy. For photos only, Remove EXIF Data from Photos does the same and keeps every pixel. Our guide on removing the location from a photo before sharing covers the phone settings too.
Trade-offs to know
A forgotten password cannot be recovered: AES-256 has no back door, so keep it somewhere safe. Encrypted ZIPs are not previewed by most email and chat apps, so tell people what you are sending. And a password only helps if you share it carefully: anyone who has both the file and the password can open it.
Frequently asked questions
Does Apple scan all my iCloud photos?
Apple's November 2026 support article is about items shared with Anyone with the Link from version 27.3. It says the change does not apply to People you choose or Send a Copy, and it does not describe checks on content you simply keep in iCloud.
Is a password-protected ZIP still private inside a public link?
Anyone with the link can download the ZIP, but without the password they cannot open the files in it. Use a long password and send it through a different channel than the link.
Are my files uploaded when I use Filevale?
No. Filevale's tools run in your browser, so the files and the password stay on your device while the ZIP or PDF is made.