What about security and privacy in the cloud?

The term ‘cloud’ is used for online working and storage. In this article we limit ourselves to the services that offer free online storage: OneDrive, Google Drive, iCloud and Dropbox. The article ‘What is the cloud?’ offers more information about the cloud.

All storage services work through a user account. OneDrive with a Microsoft account, Google Drive with a Google account, iCloud with an Apple ID, and Dropbox with a Dropbox account. The big three (Microsoft, Google, and Apple) use the user account for other things as well. For example for their mail programs or as a user account of a smartphone. Anyone who uses such a different service already has an account for the company’s storage service. The following recommendations apply to all accounts:

• Create a unique and strong password.
• Secure the account with two-step verification. In the unlikely event that the account information ends up on the street, two-step verification keeps the door to all files closed.
• Beware of phishing and malicious programs. An attempt is made to extract the login details of an account by e-mail. Don’t fall for it, be alert.
• Do not store sensitive personal information in the cloud, such as a credentials document or a photocopy of a passport.

Ransomware introduces malicious software onto the computer, which encrypts the files on the PC. If a cloud program is installed on the computer, ransomware can also encrypt the files at the cloud service. Many services arm themselves against this.

Dropbox allows users to restore previous versions of files. You can then go back to a file that is not encrypted by the ransomware. In the free version of Dropbox, this is only possible per file. Paying users can recover entire folders and even an entire account at once. OneDrive also has this recovery option, but only for paying Microsoft 365 subscribers. Google Drive also has a file recovery option, but it lags behind Dropbox or OneDrive. Ransomware for the Mac (and therefore iCloud) is hardly there.

If the threat of ransomware makes you feel unsafe, you can sync the cloud service folder manually instead of automatically. Then you can be sure that the cloud service only starts if the files are not encrypted. Of course you can also save all files only in the online environment, and not on the local disk of the computer.

All services secure the online storage of files.

Secure connection

The storage services secure the connection so that no one can watch.

File encryption

All files stored online are encrypted. The key is associated with the account. Without a key, the files are unreadable. Also for employees of the storage service. All data is therefore safe from the eyes of third parties.

Double storage

The computers of the storage services can also break. Due to a hard drive crash, but also as a result of a fire or other disaster. Therefore, the files are stored in more than one place. That way they can never get lost.

Online storage providers have an interest in protecting their customers’ data. Their security is fine. Compare it to your own finances. Which do you think is safer: having your money managed by a bank or hiding your money at home in your three-seater sofa?

The files are encrypted and therefore only readable by the user. So the privacy of files is guaranteed. All services only store information about the user. This information is protected in Europe by the General Data Protection Regulation (GDPR). Personal data may not be viewed or used. Services must indicate why they store which data. For example, there must be a clear reason for asking about someone’s age. The services may use data that cannot be directly traced back to a person to display targeted advertisements. Microsoft, Apple and Google are known for this. Those who only use the storage service of these parties will not notice it much. But most people use multiple services.