Starting with iOS 27.3, any photo or file you share from iCloud with the “Anyone with the Link” option will be checked by Apple for harmful content. That applies even if you have turned on Advanced Data Protection, Apple’s strongest iCloud encryption setting.
Apple disclosed the change in a support document about Anyone with the Link sharing, published on November 3, 2026. The same rule covers iPadOS, macOS and visionOS 27.3 or later.
What Apple is changing
iCloud gives you two ways to share an item from iCloud Photos or iCloud Drive as a link. “People you choose” limits access to people you invite or approve. “Anyone with the link” lets anyone who has the URL open the item.
Apple’s document notes that a public link has always been open to “anyone who has the link, including Apple.” The new part is that Apple will now check what sits behind those links.
If Apple flags an item as harmful, it says it “reserves the right to move, refuse, modify, remove, or delete the content at any time.” The penalties can also reach your account. Apple lists these possible steps:
- Blocking or disabling the Apple Account
- Blocking new accounts tied to the same email address or phone number
- Involving law enforcement “if necessary”
As 9to5Mac reported on the new policy, Apple released the first iOS 27.3 beta the same week. Apple has not given a public release date. Digital Trends says the stable release is expected in December 2026. Apple also notes that not all features are available in all countries or regions.
What changes for you
The checks only apply to one sharing method. Your private iCloud library is not covered by this rule, and neither are links limited to invited people. Here is how the three sharing paths compare, based on Apple’s document.
| Sharing method | Who can open it | Checked by Apple from 27.3 | End-to-end encrypted with Advanced Data Protection |
|---|---|---|---|
| Share a Link: Anyone with the link | Anyone who has the URL, including Apple | Yes | No |
| Share a Link: People you choose | Only invited or approved people | Not covered by the new rule | Not changed by the new rule |
| Send a Copy | The person who receives the copy | Not covered by the new rule | Not changed by the new rule |
For most people, nothing visible changes. A public link to holiday photos still works the same way. The difference is what Apple can do with it after a flag.
The stakes are higher than a deleted file. Apple says it may disable the whole Apple Account. For many users, that account holds purchases, backups, photos and email. A ban can also stop you from opening a new account with the same email or phone number.
The encryption trade-off
Advanced Data Protection normally keeps most iCloud data end-to-end encrypted. That means only your trusted devices hold the keys, not Apple. Apple’s document says a public link breaks that protection for the shared item.
The reason is practical. A stranger with the link has no key to decrypt the file. So Apple says that “to facilitate that sharing, the item is no longer end-to-end encrypted.” This was already true of public links. The 27.3 change adds active checks on top of that access.
How to keep sensitive files private
You can reduce your exposure with the options Apple already offers:
- Share sensitive photos and documents with “People you choose” instead of “Anyone with the link.”
- Use “Send a Copy” when the other person only needs the file, not a live link.
- Review public links you have already shared from iCloud Photos and iCloud Drive, and switch them to invited access where you can.
- Do not rely on Advanced Data Protection to cover public links. Apple says it does not.
What Apple has not explained
Apple’s support page is short, and several key details are missing:
- What counts as harmful. The document does not define “harmful content” or list banned categories.
- How the checks work. Apple does not say whether the system is automated or which methods it uses.
- Appeals. There is no described process for challenging a removal or an account ban.
- Older links. The page does not say whether links created before 27.3 will be checked.
- Mistakes. Without these details, nobody outside Apple can judge how often the system might flag the wrong file.
Digital Trends raised similar questions. It also suggested that the mention of law enforcement points to material such as malware or child sexual abuse material. That is the outlet’s own inference, not something Apple has stated.
Why this feels familiar
Apple has been here before. In August 2021, it announced a tool to detect known child sexual abuse material in iCloud Photos. After feedback from customers, advocacy groups and researchers, Apple postponed the feature.
On December 7, 2022, Apple said it would not move forward with that tool, as MacRumors reported at the time. The same announcement expanded end-to-end encryption to iCloud Photos through Advanced Data Protection.
The new policy is narrower. The 2021 plan targeted photos in iCloud Photos. The 27.3 rule targets only items that users choose to make public with a link. Even so, the lack of detail on definitions and appeals is likely to draw the same kind of scrutiny.
What to watch next
iOS 27.3 is still in beta, so Apple could add more detail before the public release. The key items to watch are a definition of harmful content, an appeals process, and an answer on older links. Until then, the safest choice for private files is invited-only sharing or sending a copy.
