# iCloud Sync

> What Fregata Mobile syncs through iCloud and how each part is protected — servers, passwords, custom headers and notification filters — what never syncs and why, and turning sync off.

With iCloud Sync on, your servers and sign-ins follow your Apple Account, so a new iPhone or iPad
comes up already knowing them: the welcome walkthrough finds them, and you only sign in. It's on
to begin with, and **Settings › iCloud Sync** shows exactly what travels.

## What syncs, and how

| What | Kept in | Protection |
|---|---|---|
| **Server list**: each server's name, its addresses at home and away, its username, the names of any custom headers, the order of your cameras, and which servers you've removed | iCloud key-value storage | Encrypted in transit and on Apple's servers, with keys Apple manages. Not end-to-end, which is why no password or secret is kept here. |
| **Passwords**, one for each server | iCloud Keychain | End-to-end encrypted: only your own devices can read it, and Apple can't. |
| **Custom header values**, such as a Cloudflare Access client ID and secret | iCloud Keychain | End-to-end encrypted. |
| **Notification filters**: your named filters, such as Home and Away, with the cameras, objects, zones and quiet hours each holds | iCloud key-value storage | Encrypted in transit and on Apple's servers. |

Passwords and header values travel separately from the rest, through iCloud Keychain, and can take
a little longer to arrive. Until they do, the sign-in step says what it's still waiting for:
**Your password is not here yet**. Give it a moment, or type it once.

## What never syncs

Some things stay on each device on purpose:

- **Certificate trust.** Each device decides for itself which certificates to trust.
- **Alert registration.** Each device registers itself, so an alert is never sent to the wrong one.
  That's why every new device runs through [Set up alerts](https://mobile.fregata.app/docs/getting-started/notifications/).
- **Notification wording, pictures, clips, sounds and Focus behaviour.**
- **Which filter is active, and snoozes.** Your iPad at home can stay on **Home** while your
  iPhone goes **Away**.
- **Appearance, layout, and the filters on Review and Explore.**
- **Which server you're looking at.**

## Check it's working

**Settings › iCloud Sync** shows two things:

- **iCloud Drive & account access**: **Reachable** when server settings can sync. If not, in the
  iOS Settings app, open your name › **iCloud**, check you're signed in, that iCloud Drive is on,
  and that Fregata Mobile is allowed under **Apps Using iCloud**.
- **iCloud Keychain**: the app can't check this one itself. In the iOS Settings app, open your
  name › **iCloud** › **Passwords**, and make sure Keychain sync is on: it carries your server
  passwords and header secrets.

## Turn it off

Turn off **Sync with iCloud** in **Settings › iCloud Sync**. This device then neither sends
settings to iCloud nor takes any from it. (This iPhone only) What's already in iCloud stays there
for your other devices, and this device keeps its own copy of each password and header from then
on. Turning sync back on uses what iCloud already has for each server.