Icloud Disk

November 30th, 2017 by Oleg Afonin
Category: «Clouds», «Did you know that...?», «Software», «Tips & Tricks»

Follow this step to turn off iCloud backup on multiple devices: Decide what iOS device will have iCloud backup. On the device that doesn’t need a backup, go to Settings. Find and tap iCloud. Toggle the iCloud Backup bar off. By doing turning off the iCloud backup on the given device, it will no longer sync with your iCloud account. Free Up Disk Space by Removing iCloud Drive Downloads. With iCloud Drive, Apple provides an Optimize Mac Storage checkbox that, when checked, stores the full contents of iCloud Drive on the Mac only if there’s enough space. However, you may wish to recover local storage space without selecting that option—luckily, that’s easy to do. To shorten backup times, you can disable iCloud from your phone. Wait until your phone and iCloud de-sync. Depending on how much data you have this can take upwards of 10 mins. Once that is done try backing up your data with the iXpand Base. To disable iCloud please do the following:-Go to settings-Tap on Apple ID, iCloud, iTunes menu-Tap on iCloud. Go to Apple ID, then select iCloud from the sidebar. Enable iCloud Drive, then open the Options for it. Turn on Desktop & Documents Folders. It might take a long time for your Desktop and Documents folders to sync with iCloud after you enable this feature for the first time. ICloud Drive lets you open, edit, and sync documents and files across devices. You can buy more storage if you like, or disable the feature in System PreferencesiCloudiCloud Drive Option.


Disk

In our previous blog post, we wrote everything we know about authentication tokens and Anisette data, which might allow you to bypass the “login, password and two-factor authentication” sequence. Let us have a look at how you can actually extract those tokens from a trusted computer and use them on a different computer to access a user’s iCloud account. Read Part 1 and Part 2 of the series.

Extracting Authentication Tokens from a Live System (Windows)

Extracting authentication token from a live system is as easy as running a small, stand-alone executable file you get as part of the Elcomsoft Phone Breaker package. The tool is called ATEX (atex.exe on Windows), and stands for Authentication Token Extractor.

Using the tool is extremely simple. Make sure you are logged on under the user you’re about to extract the token from, and launch ATEX with no arguments. The file named “icloud_token_<timestamp>.txt” will be created in the same folder where you launch the tool from (or C:Users<user_name>AppDataLocalTemp if there are not enough permissions).

The full path to the extracted file will be displayed in the console window. The resulting file with .txt extension contains the Apple ID of the current iCloud control panel user and its authentication token .

Extracting Authentication Tokens from Disk Images or Other Users (Windows)

While extracting an authentication token from the currently logged in user on a live system is a one-click affair, obtaining one from a forensic disk image or just from another user is significantly more complex.

The reason for this is the fact that authentication tokens are not stored in the system in plain text. Instead, they are encrypted, and you’ll have to provide path to the decryption key in order to make use of these tokens.

For extracting the token from the disk image (or another user on the same system), you’ll have to use Elcomsoft Phone Breaker.

First, open the tool and navigate to Tools – Apple, then use Extract Authentication Token.

When prompted, provide path to the token file:

Then you will have to provide path to the user’s Master Key:

After that, the token will be extracted and decrypted. You will be able to use it with EPB:

Note: detailed information about extracting authentication tokens is provided in Elcomsoft Phone Breaker user’s manual.

Extracting Authentication Tokens from macOS (Live)

In macOS, the authentication tokens are stored in the keychain. Let’s have a look at how to extract the keychain from.

You can use Elcomsoft Phone Breaker to extract the token. If you are able to access the live system with the user currently logged on, extracting macOS keychain is as easy as launching the ATEX tool:

The iCloud authentication token is stored in the resulting .plist file.

Copy the binary data and use in Elcomsoft Phone Breaker to access cloud data.

Extracting Authentication Tokens from macOS (Offline)

Extracting an iCloud authentication token from a disk image is a bit more complex.

In Elcomsoft Phone Breaker, use Tools – Extract Authentication Token command. Provide path to the login keychain (it is stored under /Users/username/Desktop/Keychain/login.keychain-db in macOS Sierra and newer; in older versions of macOS, the file name was login.keychain) and enter keychain password to decrypt. Note that the keychain password is usually (but not always) the same as the user’s login password for a given account.

The next step is providing path to the MME token:

Then finally the token is extracted:

Extracting Authentication Tokens from iOS System Backups

Did you know you can also extract iCloud authentication tokens from iOS system backups? In order to extract an authentication token from an iOS system backup, you will need all of the following:

  • A local (iTunes) iOS backup protected with a password (if the password is empty, you must set a temporary password before making a backup)
  • DSID of the Apple account you are obtaining the token for
  • Elcomsoft Phone Breaker

In order to access authentication tokens, you’ll be using the Keychain Explorer function of Elcomsoft Phone Breaker. To access Keychain Explorer:

  • Launch Elcomsoft Phone Breaker
  • Tools – Apple – Keychain Explorer
  • Provide path to the password-protected backup
  • Enter the password to decrypt the keychain

You will see the following window:

The very first tab (Apple IDs) contains all sources known to us that may contain the user’s Apple ID password as well as authentication tokens. Try copying iCloud-related tokens and using them in Elcomsoft Phone Breaker to authenticate!

Note that you will also need to provide a so-called DSID, which is Apple’s internal representation of the user’s Apple ID. You can get the DSID here:

Conclusion

This article concludes the short series of blog posts about authentication tokens. You should now know how to extract and use these tokens to access information stored in the user’s iCloud account.


The files and folders that you are stored in the iCloud cloud can keep up to all of your devices and you can access these files and folders via iPhone, iPad, iPod touch, Mac or PC, and iCloud.com.

before the start

1. Update your iPhone, iPad or iPod Touch to the latest version of iOS or iPados and update your Mac to the latest version of MacOS.

2. Set iCloud on all your devices.

3. Make sure you log in to iCloud on all all devices.

4. If you are using a Windows PC, update to Windows 7 or later, then download the Windows version iCloud.

If your device cannot update to the latest version of iOS or MacOS, check the minimum system requirements that use the iCloud cloud disk.

start using

Icloud Disk Full

Set iCloud cloud trays in all locations you want to access and edit files.

Icloud Disk Space

On iPhone, iPad and iPod Touch

1. Go to 'Settings>' [Your Name] '.

2. Tap 'iCloud'.

3. Open the iCloud cloud disk.

You can find your iCloud cloud file in the File app.

On the Mac

1. Go to Apple Menu> System Preferences, then click Apple ID. If you are using Macos Mojave or lower, you don't take a point to press 'Apple ID'.

2. Select 'iCloud'.

3. Log in with your Apple ID as needed.

4. Select 'iCloud Cloud'.

To add the files in the Mac 'Desktop' and 'Document' folders to the iCloud cloud disk, open 'Desktop' and 'Document'.

You can then find your desktop and 'document' folders in the 'iCloud' section of the 'Visit' side.

If you add a second Mac 'desktop', a folder with the second MAC will appear in the 'Desktop' and 'Procuament' folder of the iCloud cloud disk, you can find the second in this folder. Documents in the Mac. The file in the second MAC does not automatically merge with the files in the first MAC.

If you have used a feature from another cloud service provider, this feature can synchronize or manage your Desktop and Documentation folders, you need to close this feature to use 'desktop' and ' Document. To use 'Desktop' and 'Document', you need to install MacOS Sierra or higher.

On iCloud.com

1. Log in to iCloud.com.

2. Select 'Pages', 'NumBers Form' or 'Keynote Executive'.

3. If the system prompts you to upgrade, click 'Upgrade to ICloud Cloud'.

On Windows PC

After setting the iCloud cloud disk on your iPhone, iPad, iPod touch, or Mac, you can set it on the Windows PC.

What Documents Are Stored On Icloud Drive

1. Go to 'Start', open 'Apply' or 'Programs', then open 'Windows ICLOUD'.

2. Enter your apple ID to log in to iCloud.

Icloud Desktop App

3. Select 'iCloud Cloud' and tap 'Apply'.

Icloud Disconnect

After setting the iCloud cloud disk, all documents you have stored in iCloud will be automatically moved to the iCloud cloud disk. In addition to the Pages document, NumBers, and Keynote Executive App, your iPhone, iPad, and iPod Touch will save your files in the File app. If you don't see your files in these apps, they may be on the device that has not yet opened the iCloud cloud disk.

Comments are closed.