What cloud storage is
A cloud storage service keeps copies of your files on servers run by a provider and makes them reachable over the internet. You usually install an app or use a website, and files you place in a designated folder, or photos taken on your phone, are uploaded and made available on your other devices. The “cloud” is simply other people’s computers, in data centres, managed for you.
People use it for several different jobs that are easy to confuse: keeping files in step across devices, sharing them with others, freeing space on a device and protecting against loss. A service may do some of these well and others poorly.
Sync is not the same as backup
This is the most useful distinction to understand.
- Syncing keeps the same set of files matching across your devices. If you change or delete a file on one device, the change usually spreads to the others and to the cloud copy. It is designed for convenience.
- Backup keeps separate, restorable copies of your data, ideally including older versions, so that you can recover after a mistake or failure.
Because sync mirrors changes, it can mirror mistakes. An accidental deletion, or ransomware that encrypts your files, may be copied across your devices before you notice. Many services do keep deleted files for a limited period and store earlier versions, which can rescue you, but the length of that period and what is covered vary by provider and plan. Treat these features as a safety net rather than a promise.
Real protection comes from the idea in the article on backup strategy: several copies, at least one stored separately. A cloud service can be one of those copies, but it works best alongside another one that you control.
The advantages
- Access across devices. Files and photos are available on a phone, laptop or borrowed computer once you sign in.
- Protection from device loss. If a phone is lost or a laptop fails, files that were uploaded are generally still there. Planning for a lost phone is easier when your data lives elsewhere too.
- Offsite copy. Storage in a data centre can survive a fire, flood or theft at home.
- Sharing. Sending a link is easier than attaching large files to messages, and permissions can be changed or withdrawn later.
- Freeing local space. Some services keep files online and download them only when opened. This can help when phone storage is limited, though you then need a connection to reach those files.
- Managed hardware. Providers handle drive failures, replacement and redundancy behind the scenes, which most households could not match cheaply.
The disadvantages
- Ongoing cost. Free allowances are usually limited, and larger amounts cost a recurring fee. Over many years, a subscription can exceed the price of an external drive.
- Dependence on a connection. Large uploads can take a long time on slower links, and without a connection, files that are only online are out of reach.
- Account risk. Everything depends on your login. If someone takes over your account, they can reach all your stored files at once, which is why a unique password and two-factor authentication matter so much. If a provider suspends or closes your account, whether correctly or by mistake, you could lose access, and recovery can be slow. The general topic is discussed under account takeover.
- Changing terms. Providers can change prices, limits and features, or shut down a product.
- Privacy exposure. Stored files are only as private as the provider’s systems and policies allow. A security failure at the company could expose data, as described in the article on what happens when a data breach exposes your details.
Encryption: what it covers
Encryption scrambles data so that it can be read only with the right key. For cloud storage, three situations are worth separating.
- In transit. Files are encrypted while travelling between your device and the provider. This is standard on reputable services.
- At rest. Files are encrypted while sitting on the provider’s servers. This protects against someone stealing a physical drive, but the provider normally holds the keys, so it can technically read the files and may be required to hand them over under legal process.
- Client-side or end-to-end. Files are encrypted on your device before upload, and only you hold the key. The provider stores data it cannot read. The principle is the one described under end-to-end encryption for messaging. Some services offer this, often called “zero-knowledge”, and some offer it only for certain folders.
Client-side encryption gives stronger privacy, but there are trade-offs. If you lose the key or password, the provider generally cannot recover your files. Features such as searching inside documents, previews or web editing can be reduced. Another layer is available to anyone: encrypting sensitive files yourself before uploading them, using a tool you trust. Device encryption, meanwhile, protects the local copy, and it does not replace any of the above.
Because details differ widely, read what a provider says about who holds the keys rather than assuming “encrypted” means private from the company.
The risk of relying on one provider
Putting everything with one company creates a single point of failure. Possible problems include an outage, an account lock, a billing dispute, a service shutdown or a policy change. Moving away later can be difficult if you have accumulated years of photos and documents, particularly if exports are slow or incomplete. Similar lock-in questions arise with a cloud productivity suite.
Sensible precautions include:
- Keeping a second copy of irreplaceable items, such as family photos, somewhere independent, for example an external drive or a different provider.
- Checking whether you can export everything in standard formats.
- Turning on the strongest login protection available.
- Reviewing shared links from time to time, since a link that anyone can open may spread further than intended.
- Being thoughtful about what you upload, especially identity documents and financial records.
Choosing and using it well
Questions to ask when picking a service include how much space you need now, what the price will be later, what the version and deletion recovery rules are, where data is stored, and whether you can hold your own keys. Legal protections depend on location, and data protection laws differ in what they require.
Cloud storage is a useful tool, particularly for convenience and offsite safety. It is safest when treated as one part of a plan, not as the single place where your important files exist.