Apple to Scan for Every Photo and File Shared Through a Public iCloud Link for Harmful Content

Apple will begin checking photos and files shared through public iCloud links for harmful content with version 27.3 or later of iOS, iPadOS, macOS, and visionOS.

The policy covers items shared using “Anyone with the Link,” including photos stored in iCloud Photos and files held in iCloud Drive. Apple outlined the change in a support document published November 3, 2026.

Apple is not announcing checks of every private photo or file stored in iCloud. Its notice targets content that users make available to anyone holding a sharing link. The separate “People you choose” option, which limits access to invited or approved users, is not described as part of these checks.

For users, the key issue is privacy. Apple says an item shared through “Anyone with the Link” is no longer protected by end-to-end encryption. This applies even when the owner or other participants have enabled Advanced Data Protection, making public sharing an important exception to that protection.

Apple to Scan for Photo and File

When sharing content stored in iCloud, users can send a copy or share a link. Link sharing then offers two access settings. “People you choose” restricts access, while “Anyone with the Link” lets people open the item without individual approval. Apple says the latter also makes that content accessible to the company.

This distinction separates account security from sharing permissions. Cybersecurity News’ guide to securing iCloud accounts discusses account protection and permission reviews. In this case, the setting attached to a shared item determines whether access is restricted or available to anyone holding its link.

According to Apple’s support notice, public-link content will be checked for harmful material. However, the document does not define “harmful content” or explain the detection process. It does not identify scanning tools, describe human review, or state whether checks happen before recipients can open a link.

What Happens When Content Is Flagged

Apple says it reserves the right to move, refuse, modify, remove, or delete harmful content at any time. Possible action extends beyond removing a shared item. The company may block or disable the associated Apple Account and prevent new accounts from being created with the same email address or phone number.

The notice also allows Apple to involve law enforcement when necessary. However, it does not explain review standards, appeal options, or how users would challenge an incorrect flag. Those missing details leave questions about how the policy will work in practice, especially when an account faces restrictions.

The encryption issue sits within a wider debate over access to cloud data. Cybersecurity News previously covered reported UK demands for access to encrypted iCloud backups. This announcement concerns a narrower boundary: items deliberately shared through public links, rather than a stated expansion of access across private iCloud storage.

For sensitive documents and personal photos, the practical step is to review sharing permissions before distributing a link. Choosing “People you choose” limits access to approved recipients.

Public-link sharing should not be treated as private storage simply because Advanced Data Protection is enabled. Apple also leaves unanswered whether links created before version 27.3 will face checks under this policy.

Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs.