Apple details Secure Exclaves to isolate camera and microphone data

Apple published details of Secure Exclaves on Nov. 14, 2026, an isolated runtime that keeps camera and microphone data apart from the main operating system.

The company describes Secure Exclaves as isolated runtimes that manage camera and microphone data apart from the rest of the operating system. A secure exclave is a walled-off execution area that keeps sensor data separate from the main operating system, apps and Apple itself. Apple says building a new secure runtime requires a highly secure OS foundation. The design runs on a minimal microkernel based on capabilities, which Apple describes as secure resource handles used to name a resource and allow access to it, and Apple built the microkernel from a customized version of L4, a foundation originally created for security-sensitive deployments including the Secure Enclave Processor.

The design rests on three requirements: the main operating system cannot pull or change exclave data, only a defined set of information may pass to it, and users must see when a sensor session is active without operating system interference. The company says information processed inside Secure Exclaves stays out of reach of the main operating system, apps and Apple itself, though the device can still use the full application processor. That guarantee applies to raw sensor data only, not to everything.

Secure Exclaves operate in two modes: ambient and active. Ambient sensing lets a device listen for Hey Siri, and on HomeView it enables recognition of user faces and voices. When running in ambient mode, a sensor may respond to triggers while sharing only limited metadata with the rest of the system, and no indicator appears. In active mode, full sensor data goes to the operating system or requesting app only after a secure indicator confirms it is active and informs the user that audio and video access is happening.

Apple says the design stops malware that controls the main operating system from hiding or faking the indicator dot to listen or watch in secret. AndroidPure has not tested this claim. The Exclave Indicator Controller allows data to flow only after the indicator has been visible long enough. On HomeView, that controller drives the LED directly and ensures it is bright enough to be visible, and the company says the indicator dot stays lit until the session ends and remains on for at least three seconds.

A display exclave checks the pixels actually drawn to the screen for the on-screen indicator dot, examining the dot’s color, shape, visibility duration, minimum brightness and whether nearby pixels hide it. Apple devices use indicators whenever the camera and microphone are actively in use, but Apple says indicators are not well suited to ambient sensing because they would remain illuminated constantly. A hardwired LED would glow constantly during background sensing, such as while listening for Hey Siri, so it cannot help distinguish background listening from active recording. Always-on lights would not let users distinguish background sensing from active audio and video recording.

HomeView continually runs passive minimal visual processing to detect whether someone is within its field of view. HomeView feeds an ongoing stream of camera images to a camera exclave that works beside a person recognition exclave carrying face and voice models and an identity database. If a person comes into view, the camera exclave notices the person and alerts the main operating system that someone may be present, but no image data exits the Secure Exclave. An audio exclave processes audio the same way.

A person recognition exclave compares face and voiceprints against the identity database of enrolled users and generates a confidence score. The operating system gets just a person identifier, position and confidence level, with no actual audio or video passed along. HomeView passes identity, position and confidence metadata to the main operating system. Calendar, Messages, Apple Music and compatible third-party apps for audio and video on iPhone can use these outputs for identity-dependent features, while raw sensor data gets thrown away.

HomeView uses facial and voice recognition to identify as many as six people in a home. Secure Exclaves protect person recognition on HomeView as well as Siri Recap and Live Rewind. Siri Recap and Live Rewind record surrounding audio to build conversation recaps or to caption the last 15 seconds of a person speaking.

Secure Exclaves work with Hey Siri to protect voice data on iPhone 18 Pro, iPhone 18 Pro Max and iPhone Duo. Apple notes that Hey, Siri has relied on always-on listening technology for years. The low-power Always-On Processor performs a rough first pass to spot the Hey Siri phrase, then audio goes to an audio exclave for echo cancellation and to a Siri exclave running a larger second-pass model. During this process, the Siri process in the main operating system receives only a wake-up flag, with no audio.

Secure Exclaves protect on-screen camera and microphone indicators on iPhone 18 Pro, iPhone 18 Pro Max and iPhone Duo. They also protect camera indicators on MacBook Neo and HomeView. On iPhone 18 Pro, iPhone Duo and MacBook Neo, camera and microphone indicators live inside the exclave, so even a compromised operating system should not be able to hide them.

Apple calls the write-up its first thorough public explanation of how the system works, describes it as something other than a product launch, and says the post involves no update to install and no setting to turn on. Apple’s Security Research blog released the detailed explanation on Nov. 12, 2026, an in-depth look at Secure Exclaves for camera and microphone data protection on HomeView, iPhone 18 Pro, and other products. The company says Secure Exclaves is the most secure runtime the company has ever built and calls the setup the industry’s leading design for ambient sensing.

“Data that is processed and analyzed in a Secure Exclave cannot be accessed by the main operating system, apps, or Apple.” Apple’s engineering teams made that statement in the company’s disclosure.

Apple states that isolating memory for Secure Exclaves presented a serious engineering challenge. A Secure Page Table Monitor runs above the main operating system’s kernel with higher privilege and enforces memory isolation. Apple wrote Secure IPC in Swift, and the company reviews every interface to the main operating system so outgoing data is limited to the metadata needed for ambient sensing. The design includes isolated Neural Engine queues, and the Neural Engine exclave wipes its state after each model finishes.

Formal verification covers the kernel gradually and incrementally across different parts, Apple says, without claiming complete coverage of every kernel aspect. The company also says formal verification work on the microkernel uncovered serious flaws in many kernel subsystems that might allow full kernel compromise, and many of these problems were found early in development. The microkernel is still under active development and changes frequently.

Every security architecture remains unfinished, Apple says, and that includes Secure Exclaves. Apple’s post does not mention an independent audit for these protections. When active mode starts, the requesting app receives full microphone or camera data too. The indicator tells the user that this is happening but does not stop it.

Siri Recap and Live Rewind have run into wiretap laws in 11 US states, according to commentary from AndroidPure. Apple laid the groundwork for Secure Exclaves starting in iOS 18.

Apple says it will keep hardening Secure Exclaves with AI-accelerated vulnerability research and wider formal verification coverage. 9to5Mac speculates that future AI-first products, including rumored AirPods Pro with inferred cameras, will build on Secure Exclave architecture.

HomeView will begin arriving at customers’ doorsteps on Friday, Apple said. The company released HomeView Software 27.2, build number 24V526, described as the second 27.2 update for the device.

The update addresses vulnerabilities, including ones involving AirPlay, Messages, and Bluetooth. Customers receiving HomeView this week must install a software update during setup. The device initially ships with HomeView software version 26.5, which is six months old, because the hub’s release was delayed. Users will receive a prompt to update to HomeView software version 27.2 during setup.