Technology in terms you understand. Sign up for the Confident Computing newsletter for weekly solutions to make your life easier. Click here and get The Ask Leo! Guide to Staying Safe on the Internet — FREE Edition as my thank you for subscribing!

How safe is iCloud?

Question:

OK, Leo. How safe is iCloud? I have a feeling that privacy is a thing of the past. How do I know that nobody’s looking at my stuff?

This question is bigger than just iCloud. How safe is any online service, to be honest?

Ultimately, with any service provider, you simply don’t know that your data isn’t being looked at unless you take steps to protect it.

Become a Patron of Ask Leo! and go ad-free!

Who’s behind it?

So the first thing I would have you do, of course, is consider the source.

iCloud is a service of Apple. So we have to begin by asking: “Do you trust Apple?” I would ask the same question if you’re using any provider, be it Google, Apple, Yahoo, Dropbox, Microsoft or any of the services that are out there that give you online storage, or deal with your information in some way. If you don’t trust the company, well, then you probably don’t want to be putting your data on their servers.

Now if you have to put data online, or if you’re just not really sure whether you trust a service or not, encryption’s really the only approach that you can use to keep your data secure; and what that means is encryption that you perform before you hand over your data.

Encryption’s a start

Tools like Boxcryptor are good for this, particularly with services like Dropbox. Tools like AxCrypt and TrueCrypt are also commonly used to encrypt files before they get uploaded to shared or online services.

But once again, you’re still trusting somebody; you’re trusting the makers of those tools like Boxcryptor or AxCrypt or TrueCrypt to a) be aboveboard and b) do encryption right.

Unfortunately, some services just aren’t set up to allow you to encrypt your own data. Examples could include your email contact list or your calendar that you might place in iCloud.

The very functionality that those online storage services provide requires that they have access to the data so that they can manipulate it and show it to you. Is anyone looking? Well, probably not. But I can’t prove it.

Peeking at a locked documentIs anyone actually looking?

Could someone look? Well, probably. Hopefully, only those people that have a legal reason to do so would.

I do think that the statement “privacy is a thing of the past” is a bit of a hyperbole. Certainly, things are changing rapidly. I’m not going to argue with that. Privacy is being impacted in many different ways from many different directions as technology expands.

And yes, I’ll even say that the concept of privacy, and where its boundaries might be, is in flux. Certainly, people are knowingly and unknowingly giving up more information about themselves than they realize. But more important than anything is being aware: asking the right questions like the questions you’re asking here.

Decide who to trust and then make your decisions accordingly.

Do this

Subscribe to Confident Computing! Less frustration and more confidence, solutions, answers, and tips in your inbox every week.

I'll see you there!

2 comments on “How safe is iCloud?”

  1. The question of trusting providers of cloud storage depends on what one wants to protect. They all claim to provide ultimate security. There seem to be an endless trend of cyber-attacks on web sites. Providers try to keep attackers out – attackers keep trying to circumvent establish security measures. Furthermore, disgruntled employees may compromise in-place security protocols.
    Another thing to consider is deletions. Are files deleted permanently?
    I place all my Windows Platform help guides, help web sites in the cloud. I do not put personal data on cloud web sites.

    Reply
  2. Part of your protection is the sheer amount of data that resides on those servers. If someone was looking for information on a certain subject, they’d be able to search for it, I suppose. But as far as someone readying your letter to Aunt Lizzie, how likely is it to happen? How likely is anyone to even care what you said to Aunt Lizzie? Now if you’re a terrorist storing sensitive information about your next plan of attack it might be different, but we might as well face it that most of us aren’t really that interesting. If you have data, like banking info or passwords, then should they even be on your computer in the first place? Anything that you are afraid someone will get from you on the cloud is at risk if someone steals your computer too. And I suspect that your data is more in danger of being stolen from your living room than from the cloud.

    Reply

Leave a reply:

Before commenting please:

  • Read the article.
  • Comment on the article.
  • No personal information.
  • No spam.

Comments violating those rules will be removed. Comments that don't add value will be removed, including off-topic or content-free comments, or comments that look even a little bit like spam. All comments containing links and certain keywords will be moderated before publication.

I want comments to be valuable for everyone, including those who come later and take the time to read.