Cloud storage puts a copy of your files on a service you can reach over the internet. It can free up device space, simplify sharing and keep documents available when you change computers. The important question is what happens when a device, account or file goes wrong: storing something online does not automatically make it recoverable.
What is cloud storage?
A provider runs the servers and supplies a website, application or storage interface. You upload documents, photos or other data, then access them through your account. Some applications synchronise a folder between devices; others upload an archive that you restore later. Those are different workflows, even when both use remote storage.
Your computer may show a file that has not actually been downloaded. An online-only placeholder saves local space but depends on the connection and account remaining available. Select the application's offline option for files you need while travelling, wait for the download to finish and test opening them without an internet connection.
Choose the workflow before the brand
| Storage approach | Useful for | Question to resolve |
|---|---|---|
| File sync and collaboration | Documents used on several devices or by a small team | Will a deletion or unwanted edit spread to the other copies? |
| Photo or device services | A phone's photo library and supported device backups | Does restoring recover original files, albums, settings or only some of these? |
| Client-encrypted file storage | Files whose contents should remain unreadable to the storage provider | How will you recover encryption keys after losing your devices? |
| Object storage with backup software | Automated server or NAS archives | Which application creates and restores a consistent backup? |
| Self-hosted storage | Files and applications managed on your own server | Who maintains remote access, updates and offsite recovery? |
Google Drive, Microsoft OneDrive and Dropbox are familiar examples of file services. Compare their current plans using your actual operating systems, file sizes, collaborators and required recovery features. An account bundled with software you already use may be convenient, but check what consumes its quota and whether other household members need separate accounts.
Amazon Drive is a historical example rather than an available service: Amazon ended support for its applications after 31 December 2023. Amazon Photos and AWS storage serve different purposes. A product sharing the Amazon name is not a direct replacement for a general file-sync application.
What does encrypted storage protect?
Encryption in transit protects the connection; encryption at rest protects stored data under the service's key arrangement. End-to-end encryption adds a different boundary: the file is encrypted before storage, and the provider is not supposed to hold the keys needed to read its contents. Check the documented scope rather than treating every encryption badge as equivalent.
For example, Proton documents end-to-end encryption for Drive file contents and file and folder names. This does not mean an account leaves no operational information with the provider, or that malware on an unlocked computer cannot read your documents. Sharing a decrypted file or an accessible link also changes who can obtain it.
Apple's Advanced Data Protection is optional and has availability restrictions; Apple says it cannot offer it to new users in the United Kingdom. Even where enabled, iCloud Mail, Contacts and Calendars are not covered by end-to-end encryption. Apple also explains that it cannot recover the keys for protected data, so a working recovery contact or recovery key matters.
Use a unique account password and supported multifactor authentication. Store recovery information somewhere you can access after losing your normal device. Before moving important records, understand whether an account-password reset also restores access to encrypted files. Authentication recovery and data-key recovery can be separate problems.
Adding your own encryption layer
Cryptomator creates a vault whose encrypted files can sit inside a supported cloud-synchronised folder. Unlocking it gives you a usable view of the documents. The cloud application uploads the encrypted representation, which can be helpful when you want to keep a familiar provider while protecting document contents.
Its security documentation makes the limits explicit: file sizes, timestamps and counts remain visible. It does not protect plaintext accessed on a compromised device or every temporary copy created by another application. Check the desktop and mobile workflow you actually need, and keep a recoverable vault password separately from the sole copy of the vault.
Command-line tools also need careful operation choices. Rclone's sync makes the destination match the source, including deletions. Its copy avoids deleting destination files, but can still replace changed files; neither operation alone establishes a complete versioned backup policy. Preview changes with the documented dry-run option and test only disposable data before scheduling automation.
Sync, backup and restore are different
A synchronised folder is useful for current work. If you delete a file or ransomware changes it, those changes may synchronise too. Version history and a recycle bin can help, but retention limits, permanent deletion, account access and subscription requirements affect recovery.
Microsoft's Restore your OneDrive feature, for example, lets Microsoft 365 subscribers undo actions within the preceding 30 days. Its documentation says permanently deleted recycle-bin files cannot be recovered. That is a defined recovery feature with limits, rather than a promise that every uploaded file is safe indefinitely.
For valuable data, keep an independent recoverable copy beyond the live synced folder. If backing up applications, include their databases, configuration and attachments in a consistent state. A directory of media files may not preserve a photo application's albums, users or database. Document what the restore should produce and try a small restore into a separate location.
Understand total cost and restore time
Consumer plans commonly charge for a storage allowance. Object-storage bills can also involve requests, downloads, retrieval, minimum retention and retained older versions. AWS S3 Glacier Deep Archive requires restoration before archived objects can be accessed, has retrieval times measured in hours and a 180-day minimum storage duration. It suits long-lived archives, not instant everyday document access.
Estimate the data you will retain, monthly changes and a realistic full restore before choosing a tier. Include local hardware, power and maintenance when comparing a NAS with a subscription. A hybrid arrangement can combine convenient local access with an offsite backup, but its cost and recovery depend on the actual data and applications.
A small test before committing
- Create a test folder with two non-sensitive files and upload it.
- Open both from a second device, checking that the expected content arrives.
- Download one for offline access and test it with connectivity disabled.
- Share only the test folder, verify the intended recipient's access and revoke the link afterwards.
- Edit and delete only a disposable test file, then practise recovering its previous version or deleted copy.
- Export the test data to another location and confirm that the resulting files open independently.
These checks reveal whether the service fits your everyday workflow and whether its recovery claims meet your needs. Choose cloud storage for the access and sharing it provides, then build a separate, tested recovery plan for the files you cannot replace.
