Apple
Does Apple Notes Have End-to-End Encryption? (Updated 2026)
Apple Notes encryption in 2026: regular notes, locked notes and Advanced Data Protection. The honest three-tier answer and where the gaps still are.
Quick answer: it depends on the note. Regular notes in iCloud are not end-to-end encrypted by default: Apple holds the keys. Locked notes are end-to-end encrypted, according to Apple, with your device passcode or a notes password. With Advanced Data Protection on, every note in iCloud is end-to-end encrypted. Most people have never turned ADP on, so their unlocked notes are Apple-readable.
What is the three-tier answer?
Apple Notes has three encryption states. Regular notes with standard iCloud are encrypted with keys Apple holds. Locked notes are end-to-end encrypted with your passcode or notes password. Any note with Advanced Data Protection turned on is end-to-end encrypted. Treat them as different products, because they protect against different people.
| Note configuration | Encryption | Key custody | Apple can decrypt? |
|---|---|---|---|
| Regular note, ADP off | In transit and on server | Apple | Yes (for example, legal process) |
| Locked note, ADP off | End-to-end encrypted (per Apple) | You (device passcode or notes password) | No |
| Regular note, ADP on | End-to-end encrypted | You (trusted device keys) | No |
| Locked note, ADP on | End-to-end encrypted, plus the lock | You | No |
| Shared note | Cannot be locked; E2EE only if all participants use ADP | Apple, unless everyone has ADP | Yes, unless everyone has ADP |
Sources: Apple's “Lock notes” support article (support.apple.com/102537) and iCloud data security overview (support.apple.com/102651), checked October 2026. If you have never locked a note or turned on ADP, your notes are in the first row.
How does Apple Notes encryption work?
Regular notes sync to iCloud over TLS and are encrypted on Apple's servers with keys Apple manages. Locked notes add a layer: the content is encrypted with a key derived from your notes password or protected by your device passcode, and Apple says that keeps them end-to-end encrypted. ADP moves all Notes keys to your trusted devices.
Standard iCloud protection is competent engineering, but it is not end-to-end encryption, and Apple's own documentation says so. Our piece on whether iCloud is safe for sensitive notes covers every category.
With Advanced Data Protection (iOS 16.2 and later, opt-in), the keys for Notes exist only on your trusted devices and Apple loses the ability to decrypt. You also take on account recovery: a recovery contact or recovery key is required before you can turn it on.
What are the gaps in locked Apple Notes?
Locked notes are strongly encrypted, but the lock has practical limits. Every locked note uses the same password or your device passcode, many kinds of notes cannot be locked at all, and a forgotten notes password means the content is gone. Know these before you trust it with something important.
- One lock for everything. All locked notes share one notes password or your device passcode. If you lock with the device passcode, anyone who knows your iPhone passcode can open them. Apps such as dedicated notes lockers let you set an app lock separate from the phone passcode.
- Not every note can be locked. Apple says you cannot lock notes with tags, PDFs, audio, video or iWork documents, notes shared with others, or notes stored in IMAP accounts such as Gmail.
- Shared notes stay unlocked. Collaboration and the lock do not mix. Shared notes are end-to-end encrypted only if everyone has ADP on.
- No recovery for a notes password. If you use a separate notes password and forget it, Apple says there is no way to access those locked notes. Resetting it only applies to notes you lock afterwards.
- Titles and the unlocked phone. Once a note is unlocked, it is readable like any other until it locks again, and anyone using your unlocked phone sees whatever is not locked.
When is Apple Notes enough, and when isn't it?
For everyday content, Apple Notes is fine, especially with ADP on and the sensitive notes locked. It falls short when you need a lock separate from your phone passcode, need to lock notes with audio or PDFs, want a decoy to show under pressure, or are storing the kind of secret where one shared password is too thin.
Apple Notes is enough when:
- The content would not hurt you if someone with your phone passcode read it.
- You have turned on Advanced Data Protection, or the content is locked.
- You do not need different locks for different topics.
- You do not need to share sensitive content while keeping it locked.
Apple Notes is not enough when:
- You are storing passwords or recovery phrases (use a password manager, or paper first).
- People around you know your phone passcode, such as a partner or family.
- You need to lock notes that contain audio, PDFs or tags.
- You may be pressured to open your notes in front of someone.
A pragmatic setup: turn on ADP, keep daily content in Apple Notes, lock what matters, and use a separate app for notes that need their own boundary. Secure Notes for iPhone adds an app passcode and Face ID lock independent of the phone passcode, separate note and folder locks, a decoy PIN (Pro) that opens a harmless notebook, voice notes, and a password-encrypted AES-256 backup file (Pro).
To be straight about it: Secure Notes does not add its own encryption to notes on iPhone. They are protected by iOS Data Protection and the app lock, and its optional iCloud sync (Pro) uses your private iCloud database. If end-to-end encryption in iCloud is the requirement, locked Apple Notes or ADP deliver it. Compare both in Secure Notes vs Apple Notes, see the Secure Notes security model, or read about Secure Notes for iPhone. If you are thinking of leaving Apple Notes, see Apple Notes alternatives for privacy.
Frequently asked: Apple Notes encryption
Are Apple Notes end-to-end encrypted by default?
No. By default, notes in iCloud are encrypted in transit and on Apple's servers, but Apple holds the keys. Two things change that: locking a note, which Apple says gives it end-to-end encryption for iCloud accounts, or turning on Advanced Data Protection, which makes all your iCloud notes end-to-end encrypted.
Are locked Apple Notes truly encrypted?
Yes. Apple says locked notes are protected with end-to-end encryption for iCloud accounts, using either your device passcode or a separate notes password. Apple cannot recover them: if you use a separate notes password and forget it, there is no way to access those locked notes. Some notes cannot be locked, including shared notes and notes with tags, PDFs, audio or video.
Can Apple read my notes?
Without Advanced Data Protection, Apple holds the keys to your regular iCloud notes, so it can technically decrypt them, for example in response to valid legal process. Access controls stop employees from browsing them. Locked notes, and all notes once ADP is on, are end-to-end encrypted, so Apple cannot decrypt them.
Are shared Apple Notes encrypted?
Shared notes cannot be locked, so they never get the locked-note layer. Without Advanced Data Protection they use standard iCloud protection with Apple-held keys. Apple says shared notes stay end-to-end encrypted under ADP only when every participant has ADP turned on.
Does Advanced Data Protection cover Apple Notes?
Yes. With Advanced Data Protection on (iOS 16.2 or later), Notes is end-to-end encrypted in iCloud with keys held only on your trusted devices. This applies to all notes, not just locked ones. The tradeoffs: you become responsible for account recovery, and iCloud.com web access is off by default.
Is Apple Notes safe for passwords and recovery phrases?
A locked note is far better than a regular one, but Apple Notes is still a general notes app. All locked notes share one password or your device passcode, and anyone who knows your iPhone passcode can open notes locked with it. For passwords use a password manager; for recovery phrases, paper or steel first, with a separately locked app as a secondary copy.
Keep reading
