Apple to check publicly shared iCloud links in version 27.3
Apple has announced that iOS 27.3, iPadOS 27.3, macOS 27.3 and visionOS 27.3 will check content shared through public iCloud links for harmful material. The policy applies when a user shares an item from iCloud Photos or iCloud Drive and selects the option Anyone with the Link.
In a support document published Tuesday, Apple said the checks will begin with version 27.3 or later of the four operating systems. The updates are expected to roll out later in December. The company said a link configured for anyone with the link makes the item available to anyone who possesses that link, including Apple.
Public links change the encryption model
Apple explicitly stated that sharing an item with Anyone with the Link disables end-to-end encryption. This remains the case even when the owner or recipients have enabled Advanced Data Protection, the optional iCloud setting that uses end-to-end encryption for iCloud Backup, Photos and Notes.
The distinction is important for organisations and individuals that treat Advanced Data Protection as a blanket protection for all iCloud-held material. The protection status depends not only on the service and account setting, but also on the sharing method selected for an individual photo or file.
Apple did not define what it considers harmful content, explain what prompted the policy change, or say whether checks will apply retrospectively to links created before the 27.3 releases. It is therefore unclear whether existing public links will face the same review as links created after the software update is installed.
Potential account consequences
Apple warned that harmful content uploaded through this sharing mechanism may be removed or deleted at any time. The company also said it may take action against the associated Apple Account.
Its stated measures include blocking or disabling an Apple Account, preventing the creation of a new Apple Account using the associated email address or phone number, and, where necessary, involving law enforcement. The announcement does not provide a technical description of how checks are conducted or how users would be notified of a finding.
Implications for business sharing
Teams using iCloud Drive or iCloud Photos should identify workflows that rely on publicly accessible links before deploying the 27.3 updates. They should distinguish convenience links from controlled sharing arrangements and ensure that staff understand the encryption consequence of selecting Anyone with the Link.
The practical implication is to avoid public iCloud links for sensitive business material, review links already distributed externally, and define an approved sharing method for content that requires confidentiality and controlled access.