Is CLOUD STORAGE Secure? 4 Steps to Control YOUR DATA!

[@AllThingsSecured]

First of all, I can't stop staring at that stupid thread sticking out of my shirt sleeve. Sorry about that! Second, I'm open to debate here: do you agree with me that your own security practices are more important than the cloud service you use? Leave a comment below, and use these affiliate links to support this channel: ▶ Boxcryptor Paid Plan: www.allthingssecured.com/try/boxcryptor-yt ▶ Subscribe! kzbin.info

[@SECYBERSAFE]

Lol, probably won't have seen the thread if you hadn't brought our knowledge to it.

[@SECYBERSAFE]

But the content and the message is most important 😁 Apology accepted lol

[@paulgardiner8459]

Lol. Don't worry about it, Josh. Didn't notice until you told us! Thank you for this video. Topical for me, as I biffed the clouds above for my own WD My Cloud.

[@nigelfranco5755]

I noticed the thread....so I knew you did as well. Don't worry about it. 😁 Yes I agree with all your points, great video. 👍

[@panayotistavrinos684]

Hi. Another awsome video. quick question though. I have noticed that Boxcryptor has been acquired by Dropbox. I also noticed that there is no longer any price plans or relivent information except a notice bar at the top of their web page saying they've been acquired and the download links for various OS's. This to me is a red flag. My question, do you still recommend Boxcryptor? Thanks

[@jasgarcha4783]

Precise delivery in a user friendly format. Easily one of the best IT KZbin channels out there. Keep up the great work as always Josh😊👍.

[@AllThingsSecured]

Thank you, Jasvinder!

[@TWills-oe7hn]

Check the privacy polices of the provider you are considering. Look for ones that specifically state that they do not scan your data. Can can have 2FA but this won’t help you when the cloud provider is scanning your data to fill their pockets. Still, client side encrypt any file you wouldn’t want put on a public forum. That is the best piece of advice here.

[@kristopherclark4835]

You mentioned that you like having options available to you or something to that effect - for that reason I'm disappointed that VeraCrypt wasn't mentioned. It might be overkill for some of the less advanced users but it really lets you have control of all the knobs, is open source, free, and feature packed.

[@darrenjlabas]

My new favourite channel. Great stuff!

[@thurman2001_tre]

What about Sync, IceDrive, NextCloud, OWNCloud, or FileCloud?

[@erjacobson]

Thoughts on nordlocker?

[@TheGhost97fl]

Hey, Did you use now another Client-side-Encryption Serviece?

[@akaCamo]

You mentioned what happens if Dropbox goes out of business but what about Boxcryptor? This is the second video I’ve watched tonight that mentioned Boxcryptor and so my question after watching the first and now this one is …. What if you use this company’s encryption product and then they go out of business? How would you be able to view or edit your encrypted files? Thankyou.

[@serge8397]

This is exactly what I wanted to ask also and this question from akaCamo was not answered for 6 months.. Author, please give us some idea what to do if we encrypt our data on the client side and move it to the cloud and after that Boxcryptor (or some similar service) goes out of business. Then all our encrypted data becomes useless because it can't be decrypted .anymore.

[@arpityadav2268]

@@serge8397 I think encrpyting all files with a key which we keep with us would be the best solution or maybe we should use a different company decryptor

[@justsomeguy5103]

I've landed on also backing up my files the old fashioned way, to an external drive. These services don't generelly store revisions of files. My concern is that if e.g. ransomware messes up your data, those encrypted or otherwise damaged files are going to be synced to the cloud automatically, replacing the good version you originally had there in the process.

[@AllThingsSecured]

Yea, that makes sense. It is possible to store revisions in the cloud, I believe, but it requires a bit of setup.

[@justsomeguy5103]

@@AllThingsSecured Looks like you're right, most providers seem to offer some kind of version history. They often have limitations though. I can't even make sense what the limitations are in the case of Onedrive.

[@ShakaRDR]

Did this too, I created a script to zip the most important data, copy it to another folder in my HDD every night when I go to sleep, which I copy it manually to my external HDD tomorrow morning.

[@tilgaztizi9163]

The most important consideration in cloud storage is zero-knowledge encryption. That means that you hold the keys to encrypt/decrypt your data. Google drive, One drive and Dropbox do not offer this. They control the keys and can therefore read your data if they, or the US government wanted to . For that reason alone I would never use either one of those cloud services. You also may want to deal with a company whose servers are outside of the US to prevent this from happening. Even companies headquartered outside the US may use servers in the US, so specify that you want a server located in the EU or Canada where privacy laws are stronger. But mostly, make sure that they offer zero-knowledge encryption. I know Sync, a Canadian company, does.

[@arpityadav2268]

Thank You so much for giving the idea of encrypting the sensitive file before uploading to an online cloud storage. Also, backing up on a different online cloud storage is also a clever thing to do. Loved your video! 🥰❤ If possible please create a video, which describes a few latest online cloud storage options which are the easiest, safest, free, fastest, largest. And suggest the best practices so that our data never gets lost or compromised whatever the situation be! Please I am excited to watch that video if you make it.

[@africa_everyday]

You are an honest guy.

[@AllThingsSecured]

Ha! Thanks.

[@arpityadav2268]

I also felt the same after watching him for the first time. If not honest, atleast I am sure he is a good person.

[@huucyber]

If this guys recommend any thing about security, I’ll use it

[@AllThingsSecured]

That’s high praise. Thanks, Eric.

[@arpityadav2268]

@@AllThingsSecured You gained a new subscriber, we have high hopes from you, please keep making great videos like these. Love your content! :)

[@SECYBERSAFE]

I am learning a lot from you in terms of presentation and also the content delivered.

[@AllThingsSecured]

Thank you so much!

[@SECYBERSAFE]

@@AllThingsSecured pls, what is the name of the background music you used

[@AllThingsSecured]

I don’t remember the name off hand. I got it from Epidemic Sound.

[@SECYBERSAFE]

@@AllThingsSecured 😭needle in a hay stack

[@SplitSniper7]

Thank you for spending time on this subject. I've started taking security more and more seriously and seeing you jump on a topic makes me feel like I'm moving in the right direction in terms of safety. I have a quick question though, do you have any thoughts on home security and what would be a good rule of thumb for houses and apartments?

[@AllThingsSecured]

Can you be a bit more specific? What kind of home security? Cameras? A security company?

[@SplitSniper7]

@@AllThingsSecured I was initially thinking something like the Ring Security Systems for the doorbell but if you have any other systems that fit the home security niche I'm more than willing to give you my watch time.😅

[@developerpranav]

I'd add Mega to the list as well :)

[@bowieknife]

Appreciate your video, could you include your views on Tresorit?

[@jd1iraq]

Amazing content bro. Keep up the good work!

[@AllThingsSecured]

Thank you!

[@TON-vz3pe]

Principal of least privilege is the best thing you can trust. Use good old fashioned HDD.

[@grimeyl4052]

thank you for this in depth cloud storage security, privacy and encryption video. i recently moved out on google photos and rethinking my cloud storage game. i learned so much from you and will do 100% pf your recommendations. thanks m8

[@AllThingsSecured]

Thanks for the comment and the kind words!

[@grimeyl4052]

@@AllThingsSecured no problem sir im always looking forward of your channel.

[@Theincrediblespud]

How do you accomplish point #2? I'm not clear how to create a separate location.

[@alaunaenpunto3690]

Even as someone who prefers home storage, ask yourself: If you can't trust cloud storage, then why do you trust your bank?

[@DetectiveSquarepants]

You'll never go wrong with a well-made SSD because servers will inevitably go down and you'll need to have a backup of your data, and for the average person it works fine

[@littlebrit]

Learned this the hard way few years back.

[@jndpal]

Rclone: sync, encryption, multiple clouds, cloud drive mounting, etc

[@AllThingsSecured]

Thanks for sharing! I hadn't heard of that one before so I'll check it out.

[@kavyachouhan5615]

Is that free?

[@jndpal]

@@kavyachouhan5615 Yes! It's open source too.

[@kavyachouhan5615]

@@jndpal that's cool!

[@godfree2canada]

Hi i had insync going rogue and wiping my cloud drive, i had to keep restoring my 14g from the bin over days and days

[@brynnlauman9795]

you said you store sensitive data “in a special encrypted vault backed up in 2 places”. can you elaborate on this more? I believe you’re referring to your hardware encrypted Aegis USB. What would the other place be (say, if you were to lose that USB or something)?

[@ramneitor]

Really thanks, you help me a lot wiht your advice, greetings.

[@ghostsade3]

Another great video. Thanks again, Josh.

[@AllThingsSecured]

Thanks!

[@jasoncabigting6328]

Im using MeGa with starting free plan 20GB

[@CinnamonBeard]

Do you have any thoughts on Next Cloud? It's basically a personal cloud.

[@AllThingsSecured]

Yea, it sounds like a great option for a large family or for a small business, but I think it's a bit overkill for the average individual.

[@Glatze603]

I weekly put my important data in an openssl-encrypted tar file and then sync it to my cloud-storage with duplicati (aes256). The cloud-storag is protected with complex password and 2fa. I think, this is a quite good option to get a remote backup working securely.

[@AllThingsSecured]

Sounds like a great option, Markus…thanks for sharing!

[@Glatze603]

@@AllThingsSecured Thank you for your videos :-)

[@Glatze603]

@Vijay Hi, you mean my comment?

[@Glatze603]

@Vijay 1. You can compress a folder with data to a tar-file (*.tar.gz) and use further tar-options to encrypt this file (openssl enc -aes-256-cbc). So you have created a compressed and encrypted file localy 2. Next you can encrypt this file again and upload it to a cloud-storage like dropbox or google-cloud. This can easyly done with duplicati (can be used in docker). 3. The result is that you have double encrypted data (with different passwords!), that can be securely stored in public cloud-storage

[@downloadmuvi1425]

@@Glatze603 Hi Markus. What software do you use to make a .tar.gz file with password? I tried to use 7-Zip but for the .tar file, there is no option to set a password. I tried WinZip and no option to make a .tar file. So do the WinRAR. Thanks for your suggestion about Duplicati! I tried and I love it so much. It worked perfectly. I just need to know how to make a .tar.gz file with password protection. Thank you.

[@cherry8683]

where should i separate the sensitive data exactly?

[@alternatuber6698]

What about Koof, Filenio and Icedrive?

[@frankruan6842]

Very good tutorial, thanks!

[@AllThingsSecured]

Thanks!

[@WeightLight]

It looks as if Boxcrypter is insolvent. The company behind it is Secomba GmbH i.L. (German company) and the addition "i.L." means: In liquidation. Are there any other alternatives?

[@yggyberry8133]

Another great video, thank you! Question: How does boxcryptor compares for example to RAR with password? That way everything happens locally.

[@kanubee]

Nicely done.

[@mr.f3134]

I like mega cloud :) end-to-end encryption and good prices.

[@AllThingsSecured]

Thanks for sharing! I don't know why I didn't have that one on my list.

[@Glatze603]

Hi and thanks for this informational video! What would you say about Raven Cloud? They offer a very interesting concept in combination with there really great scanner. Is it secure to save all personal documents in their cloud? They offer HIPAA Compliance and Encryption (Transport ans Rest). Thanks for a short reply 😊

[@rushankshah9185]

Amazing video again!👍

[@AllThingsSecured]

Glad you liked it, Rushank!

[@godfree2canada]

A. No Google is also truncating many of my files to zero bytes then pushing to overwrite my computers local files! Outrageous behavior. I am security alert for decades

[@ProtmaCompanyProtmCo]

hi bro, thank you for this video

[@jlef0995]

veracrypt? Great way to create encrypted volumes (files) to hold more sensitive information

[@darkwolf41nite53]

What about haveing my own personal iCloud that’s not linked to anything My own app owning my own server With my things on it ??

[@MB-hz7wm]

@darkeolf41... consider Synology NAS

[@GersonHM4]

I'm planing to split my information between 1password and the "personal vault" of onedrive, all the information that needs autofill I'd keep it on the password manager and the rest on the cloud, I mean its more practical but I think thats enough right?

[@airi6591]

Tresorit is also an excellent product.

[@jakkuwolfinsomnia8058]

I think there is no absolute perfect way to protect your data, there’s just relatively stronger security systems to adopt in protecting your data. Cloud Storage may be better than your average Joe saving his stuff on a computer. But storing it physically is safer than having it on a device it’s all pros and cons. I think having as many layers of security is the best possible protective practice because you want to approach your data from a risk analyst point of view. Cloud Storage isn’t bad but it’s not perfect either. All it takes is a few employees to exploit their authorisation to transfer data from the server to some external drive over the internet or high-speed cable to leak terabytes of data in minutes

[@kazirafatullah2631]

You should make a review of box cryptor.

[@AllThingsSecured]

Thanks! I might do that in a future video.

[@MrWhipple42]

My setup * IDrive (paid) for continuous background backups of all the files on my computer and home NAS with end-to-end encryption. * MEGA (paid) for (mostly) manual backing up of irreplaceable and "dead file" data with end-to-end encryption. * Dropbox, OneDrive, and Google Drive for non-sensitive files only. The hard truth is that you're not going to get adequate storage space + encryption for free. You get what you pay for.

[@AllThingsSecured]

You get what you pay for…I totally agree! Thanks for sharing.

[@chickerinoradio6617]

you can probably use any service even for sensitive data as long as you encrypt it all with a strong password before uploading it, that way you can take control over your data and make sure that it is actually getting secured since it is you doing it

[@MrWhipple42]

@@chickerinoradio6617 That is true and a good point. And I do that in some cases, like with my KeePass file which I keep in unencrypted storage because it's easier to sync between two computers and a smartphone. But the nice thing about MEGA is that I don't have to separately encrypt and decrypt data before uploading and after downloading.

[@marco.nascimento]

Nice tips.

[@AllThingsSecured]

Thanks, Marco.

[@nagyba]

Dude, have you read the terms of services? They scan your files and photos, and if the algorythm scan find something "interesting" (which works as an industry secret) you will be manually reviewed! tHey wOulDn't bE aBle tO gEt aWay wIth lIeS.... Yeah, we heard that one before.

[@librandancer]

Thank you very much Josh

[@AllThingsSecured]

My pleasure 🙏

[@doyen86]

Another great entry! I don't know if you've ever covered this (didn't see it) but I was wondering how would someone setup their Ring or security camera without exposing their main Wi-Fi connection? I've heard that if you create another Wi-Fi connection just for the camera it's more secure that way. Don't know if that's on your to do list but it's security related. Nonetheless thanks for your content! Cheers.

[@AllThingsSecured]

Thanks for the suggestion! I’ll be looking into that.

[@mousamchoudhury]

What about koofr cloud storage

[@JadeSambrook]

Too bad Boxcryptor is no longer available because they sold out to Dropbox and now Dropbox is going to offer it but only to those on a business plan. So thanks Dropbox for taking away something valuable to the masses and making it only available to the few.

[@EL_SAAVY]

Wasn’t Dropbox hacked not long ago?

[@YannMetalhead]

Good video.

[@seattlebeard]

In the last year I got security letters from two hospitals telling me my data was taken by criminals. A year ago Home Depot sent me one too. So, for cloud storage, I say go to hell. I won't give them any of my data. I also don't own a smart phone for the same reason. I back up my data in physical storage no one can access.

[@ashishsharma2568]

Thank you

[@EDJOH1]

Why is tax data the largest secret you have in the US? In Sweden or some other EU countries its public information what people earn.

[@RicardoGarCeb]

I'm curious to know more from Box, Amazon cloud and Mega. Any thoughts?

[@AllThingsSecured]

Can you restate the question?

[@RicardoGarCeb]

@@AllThingsSecured Oh sorry, did not realized I had typos. I just wanted to ask if you know any security issues about other Services like Box, MEGA or Amazon Prime storage. Just out of curiosity

[@AllThingsSecured]

No security issues that I’m aware of, but there are always flaws in the code that are constantly being patched and updated.

[@GraceStewart-cb2wy]

amazing❤

[@AllThingsSecured]

👍🏻👍🏻

[@trut1960]

Sync ?

[@person-fy8kd]

Do a video on synology nas

[@AllThingsSecured]

What is that? I've never heard of it.

[@MB-hz7wm]

Agree ~ I was surprised Synology NAS wasn't included.

[@josephnielsen123]

What’s your perspective on the Apple iCloud storage thru the in built files app?

[@AllThingsSecured]

Thanks for the question, Joseph. I intentionally omitted iCloud from this video because I feel like it's a completely different beast (i.e. you can't control how the files are uploaded to iCloud like you can with these other services). I only use iCloud for very specific purposes and not to sync all my files/backups. As with all Apple products, it's very well done, I just wish there were alternatives.

[@jozefriskalcik7105]

Boxryptor it's not available anymore. It closed all customer accounts after it was acquired by Dropbox!

[@AllThingsSecured]

You're correct. I'm in the middle of researching a new video on how to encrypt files.

[@PBbane369]

Google drive and Dropbox probably worse choice you can make, not great track record of data safety, but I would be interested how OneDrive compares to rest

[@charlesmaou6375]

No cloud service is secure, make your own backups on your own drives and keep them safe

[@AllThingsSecured]

Cloud storage has its uses.

[@alaunaenpunto3690]

@@maxmustermann7365 is a trade-off

[@eliteninja5437]

What about iCloud with their new CP scanning?

[@AllThingsSecured]

I’m treating that as a separate service altogether and will be talking about that in a different video.

[@Xandros999]

Encryption will make that impossible.

[@AllThingsSecured]

Make what impossible?

[@Xandros999]

@@AllThingsSecured I believe it's not possible to scan encrypted files for their content.

[@sharemind]

There a are free open source alternative that are also more trustworthy... Cryptomator Rclone

[@walterharris6311]

Love it

[@AllThingsSecured]

Glad to hear it!

[@Monotropism0]

The problem i see here is money, i don't have money sufficient to pay google, dropbox or onedrive to storage my stuff...

[@arpityadav2268]

use MEGA's free plan, get 20GB data, which can be extended to 30 GB if you do certain tasks, backup important data on other online cloud storage as well (for a situation that data gets lost from MEGA servers, although it's extremely impossible with MEGA), use 2FA, safely keep recovery key with you, and for sensitive content create another account on MEGA, and store you content after encrypting it with a key from a service like an encryptor shown in this video. This will be enough for anyone keeping their sensitive personal information safe without paying any fee.

[@notyou1760]

Have you heard about Apple's plan to constantly scan your phone and cloud's pictures?

[@AllThingsSecured]

I have. I'll have to look into it more since I've seen arguments on both sides about it.

[@JamesDLegan]

Unless they changed Microsoft One Drive refused to allow me to upload my encrypted data therefore, I went elsewhere.

[@JamesDLegan]

@Jailbreak Man ID No, I use Cryptoforge and have for years. Microsoft had an issue with uploading encrypted files where as Dropbox and Google did not.

[@sagarshah545]

You missed iCloud Drive

[@hackverse5197]

How to contact you?

[@yatalt1]

Ignoring iCloud?

[@AllThingsSecured]

Yes, because it is its own separate product. iCloud is a service integrated with Apple products and doesn’t allow you any sort of control over your data.

[@barbaracornacchione9533]

I noticed you didn't mention MEGA. Is MEGA safe for cloud storage? Please let me know and great video!

[@saswatachakraborty]

Yes it is.

[@kimjongun1777]

You forgot MEGA

[@kawaiihikari0]

Just host your own cloud server done ✅ easy

[@wildthing6668813]

I don't keep ANY sensitive data on my PC. It's all on an external HDD that I remove as soon as I'm done with putting it on the HDD.

[@AllThingsSecured]

Very nice. And are backing up that hard drive elsewhere?

[@gamingbeast710]

awsome

[@nitayg1326]

Best way to secure your data - take a print of it and put it in your lockbox at home :) hackers have to get through my door and me:)

[@AllThingsSecured]

Ha! Effective…but not very practical 😂

[@adithrevi7994]

There is no cloud someone else computer

[@nitayg1326]

Now slowly countries are asking cloud service providers to have data of their citizens on a server in their country!

[@AllThingsSecured]

Yea, restoring data on citizens has become a hot button topic.

[@Xandros999]

That reminds me of China. I'm not sure if that's the vibe I should be getting.

[@jeansekorski179]

Amazon

[@shoaibakhtar8007]

Icedrive is better than most of these ❤️

[@AllThingsSecured]

Thanks for sharing! Other than the 10GB they give for free, what makes them "better than most of these"?

[@Lerts_D]

Yandex Disk

[@MikeHunt-rw4gf]

Algorithm.

[@AllThingsSecured]

What do you mean, Mike?

[@XCenturionX]

It's not safe. He's lying

[@AllThingsSecured]

How do?