8 Practical Tips to Secure Your Cloud Data

Because of cloud-based storage services, you don’t have to bring your portable storage device wherever you go. From Google Drive to Dropbox, cloud solutions store your data online and provide you with the ease of accessing them anywhere with an Internet connection.

The convenience does seem tempting, but uploading your data to a cloud provider could raise a couple of security concerns. For one, you can never be sure of who else could be accessing this sensitive information.

That being said, we can always protect our data from unauthorized access if we make some extra efforts. Here are a couple of practical tips to keep your cloud data as secure as it gets.

Back-up data locally

When it comes to managing data, it’s vital to get it backed-up. Generally speaking, it is good practice to create electronic copies for any of your data so that you will still be able to access it even when the original is lost or has been corrupted.

You can create an associate cloud storage account(s) for back-up purposes on any of the cloud storage services available in the market.

You should also manually back up your data in an external physical storage drive or a device like a hard disk or a thumb drive. This also allows you to access the information when you have poor or no Internet connection.

Avoid storing sensitive information

I doubt there’s such a thing as real privacy on the Internet, so personally, I wouldn’t trust storing my confidential files in the Cloud.

Call it paranoia, but identity theft is on the rise, and I just don’t want to risk any of that. In any case, we probably don’t have to look at our most sensitive data through the Cloud on a 24/7 basis.

My advice is to keep only those files which you need to access frequently and avoid putting up documents containing passwords for your various online accounts or personally identifiable information (PII) such as your credit card numbers, national identification number, home address, etc.

If you must include these kind of information in your files, make sure to encrypt them before you upload.

Use cloud services that encrypt your data

One of the easiest ways to safeguard your privacy when using cloud storage services is to look for one that offers local encryption for your data.

This provides an additional layer of security since decryption will be required before you can be granted access to the data.

Otherwise known as the zero-knowledge proof in cryptographic, this method will even protect your data against the service providers and administrators themselves.

While keeping data encrypted in the Cloud may be good enough, it would be even better if the cloud service also ensures encryption during the uploading and downloading phases. This can be done using military-grade Advanced Encryption Standard (AES) (256 bits), which services like DrivePop adopt.

With the additional step of encrypting and decrypting your data, you may realize that syncing your files with your cloud drive takes a little while. That said, this is a constant pain to go through if you want the documents to be accessible to you alone.

Encrypt the data before uploading to the cloud

If you choose not to use a cloud service to encrypt the data, you can use a third-party tool to perform the encryption.

All you got to do is download a cloud-protection app, which will allow you to apply passwords and generate secret key sequences to your files before you actually upload them to the Cloud.

Even if you’re already opting for an encrypted cloud service, it won’t hurt to go through a preliminary round of encryption for your files to get a little extra assurance.

Read all small print of Cloud Service provider

Besides storing your data, some cloud services allow you to share your photos and files with others. This definitely sounds appealing, but sometimes these services come with a catch.

There might be some fine print that they don’t advertise but will stuff in their Terms of Service (TOS) to make it legitimate.

For instance, back in 2011, Twitpic wrote in their TOS that sharing your pictures on their service gives them the right to ‘use or distribute’ the pictures. They later apologized but further clarified that they can distribute the securing-cloud-data on Twitpic and affiliated partners, although the final copyright still belongs to the owner of the photographs.

While not exactly a dedicated cloud storage service, Twitpic puts forward a good case for why you should be cognizant of what to expect from your cloud provider, especially with regard to their security and privacy policies.

Try to research online to find out if there are any bad reviews or caveats that you should be wary about. This will put you in a more informed position before you go ahead with their services.

Use strong password (and apply Two-Step Verification)

As the first line of defense against malicious hackers out there, you had better be sure that your password can stand a hacking or cracking attempt. There are tons of tips on the Internet on what makes for a good password.

Aside from going for a strong and unique password, make sure to change it frequently and not repeat it across all other online accounts you have.

Alternatively, you may go for the much more secure two-step verification for your login if your cloud service offers the option.

In the case of Google Drive, users have to log in to their Google account first to use the cloud storage service. Two-step verification can be turned on for Google accounts — a verification code sent to the mobile phone gives added security on top of just your password to be able to access your cloud data.

Be wary of your online behaviour

Sometimes, the security of your cloud data depends on what you do online, especially on public computers or connections.

When using a public computer, do you opt to not save your password, and ensure that you logged out of your account after you are done? Saving your password and leaving it logged in exposes you to the risk of strangers accessing your data.

Do you tend to connect open and unsecured Wi-Fi hotspots in public places to log in to your cloud account?

Such connections are typically unencrypted, which means that whatever you do while connected can be ‘sniffed’ by a hacker on the same network. This can even include your login credentials for your cloud account!

Protect your system with anti-virus & anti-spy app

You may be using a secure cloud service provider, which you trust, but sometimes the weakest link happens to be the computer system you’re logging in from.

Without proper protection for your system, you expose yourself to bugs and viruses that provide penetration points for hackers to access your account.

Take, for instance, the presence of a Keylogger Trojan, which attempts to track all your keystrokes.

By embedding this malicious software to seemingly legitimate files, hackers will be able to get hold of your user ID and password if your system isn’t well protected enough to detect it, and if the login isn’t secured and encrypted.