Advanced Data Protection & access on www.icloud.com

[fzJNotIBOxgnbqejSeVCvJScL]

Hey everyone.

Can someone tell me whether emails can be accessed in the browser at www.icloud.com -- even if

- Advanced Data Protection is enabled
- and without being able to allow temporary web access?

I'm asking because I would like to know whether I can access iCloud emails even if, for example, my iPhone is stolen.

(I don't have an iPhone yet.)

 

[fwmireault]

No you can't. iCloud.com is completely disabled when ADP is enabled and if you don't allow temporary access. So if your only Apple device is an iPhone, it might be difficult to access your iCloud data if the iPhone is stolen

 

[mikeszf]

No, you cant. I find their implementation lacking, considering other clients offer decryption in the browser, like protonmail, mega and some crypto wallets. Anyhow, it never bothered me because I have my icloud mail configured to forward everything to my gmail but yeah, less than ideal.

 

[fzJNotIBOxgnbqejSeVCvJScL]

No, you cant. I find their implementation lacking, considering other clients offer decryption in the browser, like protonmail, mega and some crypto wallets. Anyhow, it never bothered me because I have my icloud mail configured to forward everything to my gmail but yeah, less than ideal.

Have you tried it recently?

 

[fzJNotIBOxgnbqejSeVCvJScL]

@fwmireault Yes, thank you very much for your answer. I just can't understand why I was told by two other people that it definitely works. I also asked several times. Maybe there are regional differences? But to be honest, I can't imagine that.

 

[mikeszf]

Have you tried it recently?

Yesterday, actually. When you log into icloud from the web it will ask you to change the setting in an apple device to allow the access.

 

[msackey]

When Advanced Data Protection is turned on, you CAN access your iCloud mail as it is one of the items that is NOT protected by Advanced Data Protection. There's some misinformation going on in this thread.

Contacts is another one of those things that is NOT protected by Advanced Data Protection.

 

[fwmireault]

When Advanced Data Protection is turned on, you CAN access your iCloud mail as it is one of the items that is NOT protected by Advanced Data Protection

This is just untrue. Go to iCloud.com with ADP enabled, you will not be able to access any iCloud data online. You’re right that calendar, mail, contact etc are not protected by ADP, but Apple still disable web access to those services with ADP enabled, except if you turn on web access.

 

[msackey]

This is just untrue. Go to iCloud.com with ADP enabled, you will not be able to access any iCloud data online. You’re right that calendar, mail, contact etc are not protected by ADP, but Apple still disable web access to those services with ADP enabled, except if you turn on web access.

Ok, I have web access turned on. So perhaps that's what allows me to have access to it. I haven't tested turning it off.

 

[fwmireault]

Ok, I have web access turned on. So perhaps that's what allows me to have access to it. I haven't tested turning it off.

OP was specifically asking about accessing iCloud Mail on the Web with ADP enabled and web access disabled

 

[msackey]

OP was specifically asking about accessing iCloud Mail on the Web with ADP enabled and web access disabled

Thanks for the correction. I misread the OP.

 

[fzJNotIBOxgnbqejSeVCvJScL]

Thanks for the correction. I misread the OP.

I think you understood me correctly. My question was whether I can access the non-encrypted data (mail, contacts and calendar) via www.icloud.com under the following conditions:

1. Advanced Data Protection is activated.
2. Web Access is allowed.
3. No trusted device at hand.

According to this support document (https://support.apple.com/en-us/102630) it is apparently not possible because access to each category must be granted individually and for a maximum of one hour *from a trusted device*.

That makes sense for the encrypted categories, such as photos, notes and reminders.

But that doesn't really make sense for mail, contacts and calendar because these categories are not encrypted when ADP is activated.