Google "5v tolerant" for more information.
An IO pin, when used as an input, can accept voltages as high as 5V with whatever internal circuitry that may exist. This doesn't change the logic thresholds, it is still 3.3V logic.
An IO pin, when used as an output, will have two configurations set by some register. When set for open drain, an external pull-up resistor will provide the 5V. When set for active pull-up, the output voltage won't exceed the normal 3.3V logic levels. This may be adequate for most 5V logic to detect a logic '1'.
The device itself can not be run at 5V. It's just allowable to use 5V external logic. This may not apply to any ADC inputs and it's worth reading the datasheet to see if there are exceptions. There usually are!