This slide here is extremely important.
And this is going to explain to you how the backup is
able to extract additional information by leveraging
the keychain.
So a backup file is going to be created,
whether it's to a tool, and open-source tool, Finder,
iTunes, it's up to you.
Notice I did not say iCloud.
iCloud backups are not encrypted.
They are protected with your Apple ID, your passcode,
and multifactor authentication.
They are not encrypted at all.
So you go to create a backup.
The keychain file may be captured.
It depends on one or of two things.
Do you check the box or not check the box?
So let's look at the left-hand side.
The user selects encrypt.
You are then presented to set a passcode.
It does not care what it is.
Apple, at that point, hopes that you set such a secure passcode
that no one can ever crack it.
It is going to capture the Keychain,
and the data can be cracked.
Now, in addition, as soon as you check that box,
you'll get InteractionC, you'll get Calls, you'll get Safari,
you'll get Health, you could get Wallet.
You can get additional artifacts that you wouldn't get otherwise
in addition to that Keychain.
If you do not check that box, you
are not going to get Health, you're
not going to get the Keychain, Calls, Safari, InteractionC,
even Maps.
So you are getting a huge gap when
we look at the differences.
Now, as a user, unless you set really complex passcodes,
you're actually better off not encrypting your backup.
It's not going to get a lot of the information
that if you ever need to restore,
but it will protect you.