The UK government has quietly removed encryption guidance from its official cybersecurity pages, just weeks after pressuring Apple to weaken its data protection measures. This move raises concerns about the government’s stance on privacy and digital security, especially for individuals who rely on encryption to protect sensitive information from cyber threats.
Security expert Alec Muffet discovered that the UK’s National Cyber Security Centre (NCSC) had deleted a document that previously advised legal professionals to use encryption tools like Apple’s Advanced Data Protection (ADP). Published in October, the document specifically recommended end-to-end encryption for safeguarding critical data. ADP allows users to encrypt their iCloud backups, ensuring that neither Apple nor any government authority can access the stored information.
The webpage that originally hosted this guidance now redirects to a different cybersecurity page, which no longer mentions encryption or ADP. Instead, it now recommends Apple’s Lockdown Mode, a high-security feature designed to restrict certain functionalities to protect against spyware and targeted cyberattacks. While Lockdown Mode offers an extra layer of defense, it does not replace encryption, which ensures that data remains secure even if it falls into the wrong hands.
Muffet reported that the original document had been completely erased from the internet, though archived versions are still accessible via the Wayback Machine. A search of the UK government’s website now yields no encryption-related recommendations, reinforcing speculation that this removal was intentional.
The UK government has not provided any explanation for this decision. Both the Home Office and the NCSC declined to respond to questions about the sudden disappearance of encryption advice. This development follows a recent revelation that the UK government secretly ordered Apple to build a backdoor into its iCloud encryption, effectively giving authorities access to user data. In response, Apple announced that Advanced Data Protection would no longer be available to new users in the UK and that existing users would eventually be forced to disable it.
The removal of encryption guidance aligns with a broader global trend in which governments push for access to encrypted data under the justification of national security. Privacy advocates argue that weakening encryption undermines security for everyone, making private information more vulnerable to cybercriminals. Experts warn that these moves could erode public trust and leave sensitive data exposed to potential threats.
For individuals handling sensitive information, including journalists, lawyers, and activists, the disappearance of encryption advice from the UK government’s website signals an urgent need to take privacy matters into their own hands. Relying solely on government cybersecurity recommendations may no longer be sufficient to ensure data security. Users concerned about privacy should enable end-to-end encryption tools, strengthen their passwords, activate two-factor authentication, and stay informed about potential changes in digital security policies.
The UK government’s approach to encryption remains uncertain, but this latest development raises an important question about the balance between government oversight and personal privacy. As digital security becomes an increasingly critical issue, the future of encryption protections in the UK remains in doubt.
