Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

How to securely back up your iPhone or iPad with encryption via iTunes

In light of Apple's encryption fight, it's been noted the company can decrypt some data from an iCloud backup. Knowing this, security-conscious users may opt instead for locally-stored encrypted backups of their iPhone and iPad — a simple process through iTunes on both Mac and PC.

There are two ways to back up your iPhone and iPad: through iCloud, and locally through iTunes. Backing up your device using iCloud is automatic and convenient, but while the backups are always encrypted, Apple has admitted it can decrypt iPhone and iPad backups stored on its servers.

This is an important distinction, because Apple cannot decrypt a passcode-protected iPhone 5s or newer, thanks to its hardware-based Secure Enclave. The only way Apple, or authorities, could potentially access a user's data is if they opt to remotely backup their device to iCloud.

For this reason, users or businesses focused on having the utmost security for their devices should opt for local backups through iTunes, using Apple's encrypted backup option. It's an easy process:

    1. Connect your iOS device to your Mac or PC and open iTunes. 2. Click on the device icon at the top of the screen to bring up the Summary menu. 3. Under Backups, check the "Encrypt iPhone backup" box and specify a password. Please note, there's no way to recover iTunes backups without a correct password, so be sure not to lose it.
Image courtesy of Apple Device Summary screenshot in iTunes. Image courtesy of Apple.
    4. Once the data has been backed up, go to Preferences > Devices in iTunes and look for a lock icon next to the name of the device to ensure it was encrypted.
Device Preferences screenshot in iTunes. Image courtesy of Apple. Device Preferences screenshot in iTunes. Image courtesy of Apple.

In addition to added security, encrypted backups in iTunes also save data that traditional backups do not. That includes saved passwords, Wi-Fi settings, website history, and Health data.

The main problem with iTunes backups is, of course, convenience — while iCloud backups can be automated nightly when charging, encrypted local backups require an iPhone or iPad to be physically connected to a Mac or PC. But for some, those extra steps may be worth the peace of mind.



15 Comments

nicnac 17 Years · 59 comments

Yah, only do this if you are absolutely sure of your password. I've had many clients over the years who have forgotten AppleID passwords AND security questions and their two options are: call Apple and prove who you are to get a password reset email sent. Or, restore from an iCloud backup. Never had one yet who encrypted that backup which would leave them, then, with one choice.

davemcm76 13 Years · 268 comments

It is worth noting that if you have wifi syncing enabled in iTunes then the iPhone / iPad doesn't need to be physically connected if it is on the same wifi network but the backup does still need to manually initiated from within iTunes on the Mac / PC. Obviously backing up over Wifi vs cable can have a significant impact on the time taken but wifi backups are possible.

mfryd 16 Years · 231 comments

Local iTunes backups do not require the iPhone/iPad to be physically connected to the computer. You can backup over Wi-Fi. You should be able to set the iPhone to backup automatically when it is being charged, as long as iTunes is running, and the iPhone and iTunes are on the same Wi-Fi network. Automatic local backups are suppressed when iCloud backup is enabled.

rob53 13 Years · 3314 comments

nicnac said:
Yah, only do this if you are absolutely sure of your password. I've had many clients over the years who have forgotten AppleID passwords AND security questions and their two options are: call Apple and prove who you are to get a password reset email sent. Or, restore from an iCloud backup. Never had one yet who encrypted that backup which would leave them, then, with one choice.

The problem with your scenario is the data isn't always encrypted so there will always be personal data someone can get to. I'm sorry if your clients can't remember things but without encrypting everything, they run the risk of losing everything. Find a trusted friend, an attorney, or someone your other friends won't know and put your encryption password(s) into a sealed envelope and have that friend store it. Putting it into a safe either at a bank or in your house only protects your password from honest people, not from thieves or the government. The issue I've seen is that people always find an excuse to not use passwords but always complain later when they either forgot theirs or someone hacks into their system because they have their computer auto logon. People need to take responsibility for their actions as well as their data. Apple makes it real easy to secure a Mac and all its backups as well as iOS mobile devices. Local backups are the easiest to secure (not described in this article), just right- or control-click on your external device and run the Encrypt process. You can use the same password as on your Mac or pick a different one. It's a good idea NOT to save that password in your keychain. You'll need to enter that password when mounting that disk but so what, it's just a few keystrokes. 

Most of us are mad at our government's desire to invade whatever privacy we still have left but until we actively secure our private data, the government will continue to demand access to it. We are protected from self-incrimination so you can always tell a police officer, a judge, and the FBI you're not going to give them your password or unlock you system. You have that right.

davemcm76 13 Years · 268 comments

mfryd said:
You should be able to set the iPhone to backup automatically when it is being charged, as long as iTunes is running, and the iPhone and iTunes are on the same Wi-Fi network. Automatic local backups are suppressed when iCloud backup is enabled.

I'd completely forgotten about this automatic iTunes backup feature as I've been using iCloud backups for so long. Might have to have a play with it tonight...