Encrypted Data on iPhone: What Is Protected and What "Reset Encrypted Data" Means

Yes, an iPhone is encrypted as soon as you set a passcode. The passcode protects the data stored on the phone, and iCloud adds end-to-end encryption for sensitive data such as passwords and Health data. If an iPhone offers "Reset Encrypted Data", it can no longer read that end-to-end encrypted iCloud data, and resetting replaces the keys, so end-to-end encrypted data this device cannot read may be lost. Try to recover access first.

Is my iPhone encrypted?

Yes, once you set a passcode. Apple's data protection ties the keys that encrypt the files on the phone to the passcode, so without it the data cannot be read. A phone with no passcode has far weaker protection, so setting one is the step that matters. Use a six digit code or longer, and turn on Face ID or Touch ID for convenience. Apple explains the design in its Apple Platform Security guide.

What iCloud encrypts end to end

Some iCloud data is end-to-end encrypted, which means only your trusted devices can read it. Apple's iCloud data security overview lists 15 categories that are end-to-end encrypted with standard data protection, including Passwords and Keychain, Health, Home, Payment information, Wi-Fi passwords, Safari history and Screen Time. Messages in iCloud is on that list when iCloud Backup is off. iCloud Mail, Contacts and Calendars are not end-to-end encrypted.

Advanced Data Protection

Advanced Data Protection (ADP) is an optional setting that extends end-to-end encryption to 25 categories, adding iCloud Backup, iCloud Drive, Photos, Notes, Reminders and others. Turn it on if you want Apple unable to read your backups. The cost is that Apple cannot help you recover that data if you lose access.

• Requirements: iOS 16.2 or later on all your devices, two-factor authentication, and at least one recovery contact or recovery key.
• To turn it on: Settings > your name > iCloud > Advanced Data Protection > Turn on Advanced Data Protection, then follow the steps to set a recovery method.
• To turn it off: the same screen, then turn it off. Your data returns to standard protection.

Source: How to turn on Advanced Data Protection for iCloud. Set the recovery contact or key before you need it.

"Reset Encrypted Data" on iPhone: what it means

You may see a prompt such as "Reset End-to-End Encrypted Data" when you sign in to iCloud or finish setting up a phone. It means this device cannot decrypt the end-to-end encrypted data that is already in your iCloud account. That typically happens after you forget the passcode of your old iPhone, or when no other trusted device is signed in. Apple's documentation describes this encryption but not the prompt itself, so what follows rests on how Apple describes it: Apple cannot recover the data, and only your devices, a recovery contact or a recovery key can.

What you may lose. Resetting replaces the keys, so end-to-end encrypted data that this device cannot decrypt may be lost. That is the categories listed above that hold only encrypted copies in iCloud: saved passwords and keychain, Health data, Home, Maps favorites, Wi-Fi passwords and similar. Check the exact list on your own account before you decide. A trusted device that still holds a copy may be able to upload it again. If none does, assume it is gone.

What to try before you reset.

1. Enter the passcode of the old iPhone, or of a Mac, on the account. A passcode or password from any trusted device can decrypt the data.
2. Use an iCloud recovery contact or recovery key if you set one.
3. Sign in on a trusted device that is still signed in and check whether it prompts you.

When to reset. Reset only when you have exhausted those and accept losing the data. After the reset, new data is encrypted again with a new key on this device. Back up anything you can still read first.

Search for "reset end to end encrypted data iPhone" and you will find forum threads where the reset button does nothing or shows "Try Again Later". If that happens, sign out of iCloud on the device and sign in again, or contact Apple Support.

"Encrypted message" on an iPhone

In Messages, iMessage conversations (blue bubbles) are end-to-end encrypted between Apple devices. A message that says it is encrypted is not a security problem. SMS and MMS texts (shown in green) are not end-to-end encrypted by Apple.

Managing this across many devices

For a company, the question is whether every iPhone has a passcode, since the passcode switches encryption on. An MDM can require a passcode and set its minimum length and complexity. trio.so enforces encryption on company phones; see Apple MDM. For Macs, see FileVault disk encryption. For the wider picture, read Apple device encryption, device encryption and full disk encryption.

Related reading: how to find the FileVault recovery key on Mac.