The IconfactoryAug 26, 2025

 Your text companion is tiny but now it's also mighty! Tot 2 launches today and features new text dividers, automatic indents, a redesigned UI, customizable smart bullets & much more. Tot for iOS is a free upgrade for 1.0 owners. macOS is free to use with paid premium features. Available now for iOS, macOS & watchOS.

Learn more - https://blog.iconfactory.com/2025/08/tot-version-2-says-hello/

#TotRocks

Show threadAndrewAug 28, 2025
@Iconfactory Does Tot fully support Advanced Data Protection (ADP) for iCloud (https://support.apple.com/guide/security/advanced-data-protection-for-icloud-sec973254c5f/web)? ADP only protects CloudKit fields that third-party developers choose to mark as encrypted using the encryptedValues API, but it does NOT protect CloudKit fields that aren't marked encrypted. See: https://support.apple.com/guide/security/advanced-data-protection-for-icloud-sec973254c5f/web#:~:text=CloudKit%20Record%20fields%20must%20be%20explicitly%20declared%20as%20“encrypted”%20in%20the%20container’s%20schema%20to%20be%20protected%2C%20and%20reading%20and%20writing%20encrypted%20fields%20requires%20the%20use%20of%20dedicated%20APIs.
Advanced Data Protection for iCloud

iCloud uses best-in-class security technologies and employs strict policies to protect user data.

Apple Support
Show threadCraig HockenberryAug 28, 2025

@techlawguru @Iconfactory Tot does not use CloudKit directly. It uses the ubiquitous key/value store (NSUbiquitousKeyValueStore).

Apple doesn't document the underlying security architecture of that, but since it's used by first-party apps, it's gotta be solid. Additionally, I've see evidence of the key/value data being encrypted at rest (and probably in transit).

Show threadAndrew
@chockenberry @Iconfactory Is Tot storing the text of notes in NSUbiquitousKeyValueStore? My understanding is that the values stored in NSUbiquitousKeyValueStore are NOT encrypted. See: https://matteozajac.medium.com/keeping-app-preferences-in-sync-with-nsubiquitouskeyvaluestore-fb621826432cclau I'm also not seeing anything in https://developer.apple.com/documentation/foundation/nsubiquitouskeyvaluestore that references the ability to encrypt values.
Medium

Medium
Aug 28, 2025 at 8:28pmWeb
Show threadCraig HockenberryAug 28, 2025

@techlawguru @Iconfactory 404 on that link.

As I said before, Apple hasn't documented the internals of ubiquitous key/values.

Show threadAndrewAug 29, 2025
@chockenberry @Iconfactory Here is the link: https://matteozajac.medium.com/keeping-app-preferences-in-sync-with-nsubiquitouskeyvaluestore-fb621826432c
Keeping App Preferences in Sync with NSUbiquitousKeyValueStore

Easily sync user preferences across iPhones, iPads, and Macs with iCloud’s Key-Value Store. A quick and practical guide for SwiftUI.

Medium
Show threadCraig HockenberryAug 29, 2025

@techlawguru @Iconfactory Right. The ubiquitous key/value store is not a place for secrets.

That's why we recommend against it:

https://iconfactory.happyfox.com/kb/article/58-data-privacy-and-security/

If you're looking for a secure place to store information, both Apple Notes and Passwords are great places to do it.