Securing Online Files/Cloud Storage

You know, you have asked me, and I have answered you about cloud storage, so today more about it. I am a firm believer in “cloud” storage. I frequently use it. Some of you are worried about the security of online storage. Cloud storage is a way to store digital files (i.e., documents, photos, and videos) on remote servers accessed through the internet. It is a neat way to access your files from anywhere you may be online.

Your data is stored on servers maintained by third-party providers, not on your local computer. Cloud storage services like Dropbox and Google Drive offer encryption, but there are additional steps you can take to enhance the security of your files. Both Dropbox, Google Drive, and most other providers of cloud storage encrypt your data in transit and at rest on their servers. Dropbox uses stronger 256-bit AES encryption for stored files, while Google Drive uses 128-bit encryption. Cloud servers can be accessed from anywhere with an internet connection, allowing for greater collaboration and flexibility for remote teams. Cloud service providers often have multiple data centers, which enhance reliability. If one server fails, others can take over, ensuring continuous service, and availability. This means that your files should always be accessible to you.

However, many people, including me, believe you may want to add additional security measures, like encryption of private, personal, “secret files.” These are files involving tax returns, banking files, and whatever else you think that others should not have access to.

I use Sync.com, Dropbox.com, and Google Docs (docs.google.com) for my online storage. There are many others, but they are my preferred cloud storage sites. All of these services offer two-factor authentication, which you should enable. This allows you to get access to those files through your smartphone or some other way. This is a great security tool, and as I said before, you should enable it. None of them zero-knowledge providers, meaning they have access to encryption keys. This could potentially allow them or unauthorized parties to access your data. Although this is unlikely for any of them.

My suggestion is to use a third-party encryption tool. I suggest you consider using open-source encryption software like Cryptomator to encrypt your files before uploading them to cloud storage. This ensures that even if someone gains access to your cloud account, they can’t read your files without the encryption key. I should mention that it is also free, and I have been using it for quite a few years with never a problem.

What Cryptomator (cryptomator.org) once installed on your PC does is allow you to put files in a document “vault” and lock access to them with a password. Make sure you create a strong password and do not forget it. You cannot get into the vault without the proper password. There is a “Recovery Key” that you can set up if you wish. It is a lengthy, in my case 44 words, list of unrelated words like, “dispute orchestra casino enquiry…” If you cannot remember your password, you may enter the provided key which allows you to create a new password and then, open your vault. And yes, you guessed it. You will have to keep that list of words forever as a backup. Personally, I recommend that we do not forget our password.

Now that you have this encrypted file you may move that “Cryptomated” folder to your cloud storage and keep it there safe and sound. You may also share your encrypted files with someone else. But be cautious with sharing, when sharing files or folders, use the most restrictive permissions necessary.