Apple Platform Security
- Welcome
- Intro to Apple platform security
-
- System security overview
- Signed system volume security
- Secure software updates
- Operating system integrity
- Activating data connections securely
- Verifying accessories
- BlastDoor for Messages and IDS
- Lockdown Mode security
- System security for watchOS
- Random number generation
- Apple Security Research Device
-
- Services security overview
-
- Apple Pay security overview
- Apple Pay component security
- How Apple Pay keeps users’ purchases protected
- Payment authorisation with Apple Pay
- Paying with cards using Apple Pay
- Contactless passes in Apple Pay
- Rendering cards unusable with Apple Pay
- Apple Card security
- Apple Cash security
- Tap to Pay on iPhone
- Secure Apple Messages for Business
- FaceTime security
- Glossary
- Document revision history
- Copyright
![](https://help.apple.com/assets/6537FB06A074DBB5E802EA07/6537FB31280588A5490B6E1D/en_GB/52d714626638d3391623c853be0c593b.png)
Legacy Contact security
If a user wants their data to be accessible to designated beneficiaries after their death, they can set up Legacy Contacts on their account. A Legacy Contact is established much like a Recovery Contact, except that the keying information used by a beneficiary doesn’t encompass the information necessary to decrypt the deceased’s iCloud Keychain. The key structure used is the same as for account recovery contact, except that in this case Apple stores the encrypted packet and the beneficiary keeps the AES key. This allows the portion the beneficiary receives to be shorter — and thus easier to print out if necessary — while still providing the same property that neither part provides any information about the underlying key by itself.
The keying information a beneficiary receives is referred to as an access key in user-facing documentation. The access key is saved automatically on supported devices but it can also be printed and stored offline for use. For more information, see the Apple support article How to add a Legacy Contact for your Apple ID.
After the user’s death, Legacy Contacts sign in to the Apple claim website to initiate access. This requires a death certificate and is authorised in part with the authorisation secret mentioned in the previous section. After all the security checks are completed, Apple issues a username and password for the new account and releases the necessary keying information to the Legacy Contact.
To more easily input the access key when needed, it’s presented as an alphanumeric code with an associated QR code. After it’s entered, access to the deceased’s iCloud data is restored. This can be performed on a device or access can be established online. For more information, see the Apple Support article Request access to an Apple account as a Legacy Contact.