Advanced Data Protection

The following requirements need to be met in order to enable Advanced Data Protection for your iCloud account, while being able to use this tool:

• Fulfill ADP requirements
• Enable MFA
• Create Backup Method (security key or recovery contact)
• Enable ADP
• Turn on Web Access for iCloud Data

The tool will send an authorization request to the trusted devices of the user before being able to access the iCloud data. Until the request is approved, the tool retries every 10 seconds and prints:

Advanced Data Protection request not confirmed yet, retrying...

The request might also be confirmed on its own after one or two retries. If the setup does not complete within the MFA timeout plus five minutes (15 minutes by default), it times out and the execution fails.

The download URLs, which are part of the fetched metadata, expire after roughly 15 minutes. They are refreshed without setting up the account again, therefore no further approval is necessary. Only if the sync is retried (e.g. because the session expired after 8 hours), the account is set up again, which might require another approval.