Encrypted databases on iCloud can be opened without any password

[Han Sa]

Hi,

I created a new database on iCloud and chose encryption option. On the device (Device1) that I created the database I am being asked for a password to open the database but on another device connected to the same iCloud account (Device2) I can easily open and edit the database without any password and I confirmed that any edits I made on Device2 are synced back to Device1. Even more interesting Device2 showed that the database was not encrypted at all and gave me an option to encrypt it with another password. Now I have the same database which is in sync between two devices and both devices accept a different password for this database. I wanted to ask how the encryption works.

[Brendan]

Hi Han,

The database is encrypted locally. Not when stored in iCloud. However, it is encrypted during transport over the Internet. And also it’s encrypted by Apple in your iCloud account. But yes, if you download it to another device, you’ll need to re-encrypt it there. It can, as you’ve discovered, be encrypted with a different password.

Thanks,

Brendan

[Author]

Posts