Public iCloud links get Apple content checks starting with iOS 27.3
Apple will check items shared with Anyone with the Link for harmful content in iOS, iPadOS, macOS and visionOS 27.3.
Apple · Macfolio · 5 November 2026
Apple published a support document on November 3, 2026 saying that items shared from iCloud with the "Anyone with the link" option will be checked by Apple for harmful content, starting with version 27.3 of iOS, iPadOS, macOS and visionOS. Those updates are in developer beta now and Apple has not given a release date.
What changes and what does not
iCloud offers two ways to share a photo from iCloud Photos or a file from iCloud Drive: Send a Copy, or Share a Link. A shared link can go to "People you choose", meaning only people you invite or approve, or to "Anyone with the link". Apple says only the second option is affected.
According to the support document:
- Items shared with Anyone with the Link on 27.3 or later "will be checked by Apple for harmful content"
- Such items are not end-to-end encrypted, even with Advanced Data Protection turned on
- If you try to upload harmful content, Apple may move, refuse, modify, remove or delete it
- Apple may also block or disable the Apple Account, block new accounts with the same email or phone number, or involve law enforcement
The encryption point is not new. Apple's Advanced Data Protection documentation has long said that sharing with anyone with the link does not support end-to-end encryption, because Apple holds the keys needed to serve the item on the web. What is new is that Apple says it will actively check that content.
Who should pay attention
If you use public iCloud links to hand files to clients, post downloads, or share photo sets, those items will be checked once you are on 27.3. People-you-choose sharing, Send a Copy and private iCloud data are not mentioned as part of the change. Teams with confidentiality rules should move sensitive files to invite-only links now.
This does not mean Apple is scanning your whole iCloud library or your end-to-end encrypted data, and it does not revive the on-device photo scanning Apple dropped in 2022.
Our take: treating a public link as public is reasonable, and the scope is narrower than the headlines suggest. The weak spots are the vague wording and the account penalties, which can hit hard if a check gets it wrong.
Caveats: Apple does not define harmful content, explain how checks work, describe an appeal process, or say whether links created before 27.3 will be checked.