Is Apple Reminders encrypted? What Advanced Data Protection changes

Yes, Apple Reminders is encrypted, but under iCloud's default setting Apple keeps the keys. Apple's own iCloud data security overview lists Reminders as encrypted "in transit and on server" with the keys stored by Apple under standard data protection, and as "end-to-end" encrypted with the keys on your trusted devices only once you turn on Advanced Data Protection.

That row answers most of it. What it leaves out is what "Apple keeps the keys" means day to day, what the stronger setting takes to turn on, the exceptions in Apple's own footnotes, and the fact that no encryption hides a reminder from a Lock Screen face up on a desk. I make a reminders app, Notif, on top of Apple Reminders; it gets the last section, and everything before it is Apple's pages.

On the phone itself, the passcode does the encrypting

Apple's passcode guide says setting a passcode also turns on data protection, which encrypts your iPhone data with 256-bit AES encryption (some apps may opt out). So the copy on your phone is covered the moment you set a passcode.

The question people mean is about the copy in iCloud. Apple's Reminders accounts guide says reminders stored in iCloud appear on every iPhone, iPad, Apple Watch and Mac signed in to the same Apple Account, and the iCloud guide adds iCloud.com. That copy lives on Apple's servers, and its protection depends on which of two settings your account uses.

Standard data protection: encrypted, but Apple holds the keys

Standard data protection is the default for every Apple Account. Your iCloud data is encrypted in transit and stored encrypted at rest, and the encryption keys from your devices are kept in Apple's data centers, so Apple can decrypt it for you when you need it: a new device, a restore from backup, or a forgotten password.

That second half is the trade: what Apple can decrypt for you, Apple can decrypt. Under standard protection only 15 categories are end-to-end encrypted, including Health and passwords in iCloud Keychain, and for those Apple says it doesn't have the keys and can't help you recover the data.

Reminders isn't one of the 15; neither are Notes, Photos or iCloud Backup. The rows that matter for a reminders user, in Apple's own column labels:

What Advanced Data Protection changes

Advanced Data Protection is the optional setting Apple calls its highest level of cloud data security. With it on, Apple says the majority of your iCloud data, including iCloud Backup, Photos and Notes, is end-to-end encrypted and that no one else can access it, not even Apple, even in a breach of Apple's cloud. The count of end-to-end encrypted categories rises from 15 to 25; Reminders is one of the ten that move.

The trade flips: Apple no longer has the keys, so if you lose access to your account, only your device passcode, a recovery contact or a recovery key gets that data back, which is why Apple makes you set one up first.

What Apple requires before you can turn it on

From Apple's how to turn on Advanced Data Protection page:

• Two-factor authentication on your Apple Account, and a passcode or password on the device you're using
• A recovery contact or a recovery key. Apple guides you to set up at least one first
• Updated software on every device signed in to your Apple Account: iOS 16.2 or later on iPhone, iPadOS 16.2 on iPad, macOS 13.1 on Mac, with minimums for Apple Watch, Apple TV, HomePod and iCloud for Windows too. A device that can't update blocks it; Apple says to remove it from your device list
• Not a Managed Apple Account or a child account. Apple says neither is eligible
• Not a new user in the United Kingdom. Apple's UK notice from September 2025 says it can no longer offer the feature to new users there (Reminders is on its list of what stays on standard protection) and that it remains available everywhere else

A recovery contact is someone you trust with their own Apple device. Apple's recovery contact page says they can give you a six-digit code to get back in, have no access to your account themselves, and that Apple doesn't know who they are, so you have to remember. You can have up to five; you both need iMessage on and to be over 13.

A recovery key is a 28-character code. Apple's recovery key page says it replaces Apple's standard account recovery, and that if you lose access to your account and can't produce the key, you're locked out permanently; Apple can't give you a new one. Apple says not to keep it in the Passwords app, iCloud Photos, Notes or iCloud Drive, since you'd need your account to open those. Paper, somewhere safe.

How to turn on Advanced Data Protection

1. Update the iPhone in your hand to the latest iOS, then update or remove every other device signed in to your Apple Account
2. Set up a recovery method: Settings, your name, Sign-In & Security, then Recovery Contacts and Add Recovery Contact, or Recovery Key and Continue (write the key down before you confirm it)
3. Open Settings, tap your name, then tap iCloud
4. Scroll down, tap Advanced Data Protection, then tap Turn on Advanced Data Protection
5. Follow the onscreen steps to review your recovery methods and finish

Turning it on from one device turns it on for your whole account, Apple says. Turning it off is the same path with the switch off; your device uploads the keys to Apple's servers and you're back on standard protection.

The catches Apple itself lists

Even with the feature on, Apple's own pages list what stays outside end-to-end encryption:

1. Reminders synced using CalDAV. Apple's footnote on the Reminders row says they don't support end-to-end encryption. That's lists from other accounts in the Reminders app, such as Exchange, Yahoo or a CalDAV account added under Other, which aren't in iCloud at all
2. Calendars, contacts and mail. Apple says contacts and calendars are built on CalDAV and CardDAV, standards without built-in end-to-end encryption, and mail has to work with everyone else's email. A dentist appointment in Calendar is on a different footing from the reminder to book it
3. iCloud.com. Web access is off by default once the feature is on; turning it back on gives the browser you're using and Apple temporary access to keys from your device to decrypt and show your information
4. Shared content. Under standard protection, nothing you share is end-to-end encrypted. With the feature on, Apple says shared content stays end-to-end encrypted as long as all participants have it on; its examples are shared Notes, iCloud Drive folders, the Shared Photo Library and Freeform, not Reminders lists, so treat a shared list as the weaker case. And Apple's sharing page says everyone who accepts your invitation can add, delete and complete items. Encryption keeps strangers and Apple out, not the people you invited
5. Metadata. Dates and times an item was changed, checksums and the like stay under standard protection; always encrypted, Apple says, but with the keys held by Apple
6. Losing your recovery methods. Apple's line is that if you lose access to your account, Apple won't have the keys to help you recover it. The recovery key page goes further: no key, no account

Encryption doesn't cover your Lock Screen

Everything above is about the copy in iCloud. The place a reminder most often gets read by the wrong person is a Lock Screen notification, and no iCloud setting touches that.

• Show Previews. Apple's notification settings guide has the switch: Settings, Notifications, Show Previews, with Always, When Unlocked or Never, for all apps or per app under Notification Style. When Unlocked means the alert arrives on time and the words appear once Face ID has seen you
• Lock Screen widgets. If you keep a Reminders widget there, Apple's Lock Screen guide says turning off a feature under Allow Access When Locked, in Settings, Face ID & Passcode, stops someone holding your iPhone from seeing the personal information in it, at the cost of your own quick access

The full set, including locking the app with Face ID, is in private reminders on iPhone.

Where Notif fits

Notif is the reminders app I built for iPhone, iPad and iPhone Duo. Every note is a real reminder in Apple Reminders, in Notif's own list; there's no Notif account and no copy of your notes on Notif's servers. So in iCloud a Notif note gets exactly the protection you chose for your account, standard or Advanced.

Two things are different.

First, a note that isn't private can be sent, one at a time, to Notif's server and an AI provider to write its Insight, the one line of help on the note. The privacy policy says Notif's server does not store your note content, Notif's logs never contain note text, and notes that look sensitive, like passwords and PINs, never get an Insight on their own. It still goes to a server; if that bothers you for a given note, the next part is for it.

Second, private notes. The policy's line is: "A note you mark private is never sent to Notif's server or to any AI, and Notif takes it out of Apple Reminders." So a private note isn't in your iCloud Reminders under either setting, because it isn't in Reminders at all. Instead, private notes are encrypted on your iPhone with AES-256, opened with Face ID. Private notes never show up on your widgets or in iPhone search, and a private note's alerts never show its words on your Lock Screen, which closes the gap above.

Where the copies end up:

• A new iPhone. Private notes come with you through iCloud Keychain. Keep it on in Settings, or a new iPhone can't open them. Apple's Keychain page has the switch: Settings, your name, iCloud, Passwords under Saved to iCloud, then Sync this iPhone
• Backups. Like the rest of Notif's data on your iPhone, a private note is part of your own iPhone backup. A backup to iCloud gets whatever you chose for iCloud Backup: keys at Apple under standard protection, end-to-end in Apple's table once Advanced Data Protection is on

Marking a note private is part of Notif Pro, $4.99 a month or $39.99 a year, cancel any time: an Insight on every note, smarter Action Buttons and private notes, where free is an Insight a day. To be clear, only the notes you mark private are private; everything else in Notif is an ordinary reminder with an ordinary reminder's protection.

What I'd actually do

• Turn on Advanced Data Protection if your devices and account qualify, and keep the recovery key on paper
• Set Show Previews to When Unlocked; it's the leak that actually happens
• Keep the family list for family things, and for a reminder no server should ever see, use a private note in an app built for one

If you're weighing Notif against the built-in app, Notif vs Apple Reminders goes through the rest. Notif is free on the App Store: get Notif.

Questions

Is Apple Reminders end-to-end encrypted?

Not by default. Apple's iCloud data security overview lists Reminders as encrypted in transit and on Apple's servers with the keys held by Apple under standard data protection, and as end-to-end encrypted with the keys on your trusted devices only once Advanced Data Protection is turned on

Can Apple read my reminders?

Under standard data protection Apple says the encryption keys are kept in Apple data centers so it can decrypt your data for you, for example to restore a backup or recover a forgotten password, so in principle yes. With Advanced Data Protection on, Apple says no one else can access your end-to-end encrypted data, not even Apple

What do I need before I can turn on Advanced Data Protection?

An Apple Account with two-factor authentication, a passcode on your device, a recovery contact or a recovery key, and updated software on every device signed in to your account, which means iOS 16.2 or later on an iPhone. Managed Apple Accounts and child accounts aren't eligible, and Apple can no longer offer it to new users in the United Kingdom

Does Advanced Data Protection hide my reminders on the Lock Screen?

No. It protects the copy of your reminders in iCloud, not what your screen shows. A reminder's alert still shows its text on the Lock Screen unless you set Show Previews to When Unlocked or Never under Settings, Notifications

Are shared Reminders lists end-to-end encrypted?

Apple says content you share isn't end-to-end encrypted under standard data protection, and under Advanced Data Protection it stays end-to-end encrypted only while every participant has the feature on. Either way, everyone you invited to a list can read what's in it

Are Notif's notes encrypted?

Notif's notes are real reminders in Apple Reminders, so they get whatever iCloud protection you chose, standard or Advanced. A note you mark private leaves Apple Reminders instead: private notes are encrypted on your iPhone with AES-256, opened with Face ID, and are never sent to Notif's server or to any AI. Marking a note private is part of Notif Pro