![\"Advanced](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/12\/advanced-data-protection-hero.png\" "\\"advanced-data-protection-hero.png\\"")
<\/p>\n<\/p>\n
Apple has announced a trio of new security and privacy features for its operating systems and devices. Advanced Data Protection for iCloud, iMessage Contact Key Verification, and support for security keys as a two-factor option for Apple ID, will further cement Apple’s reputation of making some of the most secure devices available.<\/p>\n
These three features will be rolling out throughout 2023. Here\u2019s what they are and how they will work.<\/p>\n
In this article:<\/em><\/p>\n iMessage has always been a secure messaging platform; messages to and from Apple users are encrypted and cannot be intercepted. (However, green-bubble SMS text messages that you can send and receive via the Messages app are not secure. Additionally, until now, iMessage conversations backed up to iCloud could be accessed by Apple employees, for example if compelled to do so by law enforcement; more on this later.)<\/p>\n iMessage Contact Key Verification ensures that the person you are messaging is who they say they are. Apple says that \u201cConversations between users who have enabled iMessage Contact Key Verification receive automatic alerts if an exceptionally advanced adversary, such as a state-sponsored attacker, were ever to succeed breaching cloud servers and inserting their own device to eavesdrop on these encrypted communications.\u201d Since multiple devices can use the same iMessage account, this alert will let you know if someone has managed to defeat account protections and intercept messages.<\/p>\n Most users don\u2019t need this feature, but Apple is rolling it out for \u201cusers who face extraordinary digital threats \u2014 such as journalists, human rights activists, and members of government\u201d whose messaging is especially sensitive.<\/a><\/p>\n While Apple\u2019s two-factor authentication<\/a> is robust, it depends on other devices to authenticate new devices. If someone gets access to one of your devices, they can then access your Apple account. Apple will allow users to add an additional factor, a hardware security key, to authenticate new access to that account. As Apple says, \u201cThis feature is designed for users who, often due to their public profile, face concerted threats to their online accounts, such as celebrities, journalists, and members of government.\u201d This would prevent, for example, hacking into iCloud accounts, as has happened in the past, to retrieve sensitive photos, but also provide additional protection for messaging and email.<\/p>\n Security keys are available with a number of different connection methods, and some work with NFC (near-field communication) so they don\u2019t need to plug into devices. Given that Apple devices are available with USB-A, USB-C, and lightning connectors, an NFC security key would be the best choice, but some keys are available with both USB and NFC, and some come with adaptors so you can use different types of USB ports.<\/p>\n It wouldn’t be surprising if Apple starts selling a security key in their retail and online stores next year in conjunction with the rollout of this new feature.<\/p>\n We previously looked at security keys in How to Use a Security Key to Protect Sensitive Online Accounts<\/a>.<\/a><\/p>\n How to Use a Security Key to Protect Sensitive Online Accounts<\/a><\/p><\/blockquote>\n\n
iMessage Contact Key Verification<\/h3>\n
![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/12\/messages-2.jpg\")
<\/p>\nSupport for security keys for Apple ID 2FA<\/h3>\n
![\"Security](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/12\/security-keys.jpg\" "\\"security-keys.jpg\\"")
<\/p>\n