A reported White House security message warns that a secret UK iCloud backdoor encryption-access mechanism could be turned on US political figures. No evidence shows that happened, but the fear itself captures why exceptional access to encrypted systems is so difficult to contain.
The Order Apple Refused
The UK reportedly sought the capability to access encrypted iCloud data worldwide, and Apple’s response was to pull its strongest optional encryption from British users entirely.
According to reports, the UK government issued a Technical Capability Notice in January 2025 under the Investigatory Powers Act, demanding Apple maintain a capability to access encrypted iCloud backups. The original scope was sweeping: it reportedly sought access to user data globally, including data belonging to people outside the UK.
After reported pressure from the Trump administration, the worldwide scope was reportedly scaled back to focus on UK users, though that narrowing has not been officially confirmed. Apple has stated publicly that it has “never built a backdoor or master key” for its products and never will.
Rather than comply, Apple removed Advanced Data Protection from the UK market. The UK government has not confirmed or denied the existence or precise terms of the order.
When the Lock Works Both Ways
A White House official’s reported warning captures the central problem with exceptional access: once a mechanism exists, controlling who uses it becomes the real vulnerability.
According to the New Statesman, a White House security official wrote in September 2026 that the UK was making “another attempt” to place a backdoor in iCloud through a secret court process, and might use it to secretly tracking users like the administration and Nigel Farage. No evidence establishes that either Trump administration officials or Farage were actually targeted or surveilled through such a mechanism.
Privacy advocates have long compared exceptional access to a surveillance app master key that gets copied: once it exists, controlling who uses it and for what purpose becomes the central problem. That argument, debated in security circles for years, was reportedly surfacing inside the White House itself.
Bipartisan concern in Congress followed the same logic. Jim Jordan warned UK Home Secretary Shabana Mahmood that weakening encrypted services puts US citizens’ data at risk.
Senator Ron Wyden and Representative Warren Davidson separately criticized the secrecy surrounding the order. Both warned that any access capability could be exploited by hostile actors, not just authorized investigators.
A Secret That’s Not a Secret Anymore
Apple and privacy groups are challenging both the reported demand and the UK government’s effort to keep the entire dispute classified.
The dispute is now before the Investigatory Powers Tribunal, where Apple and privacy groups Privacy International and Liberty have filed separate but related challenges against both the underlying demand and the government’s refusal to publicly acknowledge it.
At a tribunal hearing, Ben Jaffey KC represented Privacy International and Liberty. He argued that the UK’s “neither confirm nor deny” position had become untenable given how extensively the order had already been reported. Government counsel Neil Sheldon KC defended continued secrecy on national-security grounds, according to reports of the proceedings.
What This Means for Your iCloud
The tribunal’s outcome could determine whether your cloud storage security varies depending on where you live.
If you are a new UK iCloud user, Advanced Data Protection is no longer available to you. It is worth noting that Apple’s standard iCloud encryption remains in place for 15 categories of data; what UK users lose is the optional end-to-end encryption that ADP previously extended to an additional ten categories, including backups, Photos, and Notes.
Its decisions could shape whether governments may secretly compel changes to consumer encryption, and whether the security level of your cloud storage ultimately depends on your passport. Knowing how to stay safe with your personal data has never been more important.
