Are iCloud Shared Albums private? What Apple's encryption covers
iCloud Shared Albums are one of the easiest ways to share photos with family on iPhone: create an album, invite people, and they can view, like and comment. But "private" and "end-to-end encrypted" aren't the same thing. Here's what Apple's own documentation says.
How Shared Albums work
You create a shared album in the Photos app and invite people by email or phone number. Everyone you invite can see the photos, comment and, if you allow it, add their own. Apple's documentation lists limits of up to 100 participants and up to 5,000 photos and videos per shared album.
Are they end-to-end encrypted? No
Apple offers Advanced Data Protection, an optional setting that end-to-end encrypts most iCloud data, so that only your trusted devices hold the keys. Apple's Platform Security guide is explicit that Shared Albums are not included: they use standard data protection, because albums can be shared publicly on the web. With standard protection, data is encrypted, but Apple holds the keys.
In practice, that means your shared album is protected by Apple's security rather than by encryption only your family can unlock.
Your photos are shrunk
According to Apple's Shared Albums limits, photos added to a shared album are reduced to 2,048 pixels on the long edge (panoramas can be wider), and videos are limited in length and resolution. That's fine on a phone screen, but not for printing or keeping as the family archive.
The public website option
Each shared album has a "Public Website" setting. When it's on, anyone with the link can see the album in a browser, with no invitation needed. Check that it's off for every album with photos of your children: open the album, tap the people icon, and look for Public Website.
A more private option built into iPhone: Shared Library
iCloud Shared Photo Library is different from Shared Albums. It lets up to six people share a whole photo library, and Apple's documentation says it can stay end-to-end encrypted when every participant has Advanced Data Protection turned on. It works well for a household, but it's designed for a small group sharing everything, not for sending selected photos to grandparents, aunts and uncles.
Quick checklist
- Turn off Public Website on every shared album.
- Review who's invited to each album.
- Keep your full-quality originals in your own library, not only in a shared album.
- For your household, consider Shared Library with Advanced Data Protection.
- For the wider family, consider a service that end-to-end encrypts shared photos.