Is Cloud Storage Safe? Two Questions, Two Answers
"Is it safe?" is two questions. Can somebody else read my files, and might I lose them? The second is far more likely to happen to you, and gets far less attention.
On this page
This question hides two completely different worries, and conflating them is why the answers you find are unsatisfying.
- Can somebody else read my files?
- Might I lose my files?
The first is what people ask. The second is what actually happens to them. Both deserve honest answers, and they are different answers.
Question one: can somebody read my files?
The provider almost certainly can
Google, Microsoft, Apple and Dropbox all encrypt your files in transit and at rest. That protects against interception and against someone walking out of a data centre with a disk.
What it does not do is put the files beyond the provider's reach, because the provider holds the keys.
This is not a scandal or an oversight — it is what makes the products work. Searching your Drive by file contents, previewing a PDF in the browser, editing a document without downloading it, generating photo thumbnails: every one of those requires the service to read your data.
The practical consequences are that employees could technically access files under some circumstances (policies and auditing exist to restrict this), and that the provider can be compelled by legal process to produce your files.
Unless it is end-to-end encrypted
Proton Drive is end-to-end encrypted by default. The keys never leave your devices, so Proton stores data it genuinely cannot read. Its free tier is 5GB.
The trade-off is real and worth understanding rather than glossing over. Anything that requires the provider to read your files becomes limited or impossible — full-text search across your documents, rich previews, simultaneous collaborative editing.
There is also a sharper trade: if the provider cannot read your files, it cannot recover them for you either. Lose your credentials and there is no support team that can help, which is the same bargain a password manager makes.
This produces a practical arrangement most people should probably adopt: put the sensitive minority of your files in an end-to-end encrypted service, and the rest wherever is convenient. Identity documents, financial records, anything under a professional confidentiality duty. That is usually a few hundred megabytes and fits comfortably in a free 5GB tier.
The threat that is actually likely
Not the provider being breached. Your account being taken over.
A compromised password on your Google or Apple account hands somebody everything, and no amount of provider-side encryption helps, because the attacker is logged in as you.
Which makes the highest-value action in this whole article deeply unglamorous: turn on two-factor authentication for the account that holds your files, and make sure that account's password is unique. If it is your main email account as well — which for most people it is — it is also the reset route to everything else you own.
Everything else in this article is a rounding error next to that.
Question two: might I lose my files?
Here the honest answer is yes, more easily than you think, and not for the reason people expect.
The major providers are extremely good at not losing data through their own failure. They run redundancy across facilities in a way no individual can match, and a hard drive dying at Google is a non-event.
The way you lose files is you delete them, and sync obediently deletes them everywhere.
Dropbox, Google Drive, OneDrive and iCloud all sync, which means they propagate every change including the destructive ones. Delete a folder on your laptop and it goes from the cloud, your phone, and your colleague's machine. Save over a good document and the good version is gone everywhere. Ransomware encrypts your drive and the encrypted files upload cheerfully, replacing the readable ones.
Every service keeps deleted items for a recovery window, typically around thirty days on consumer plans. That covers the mistake you notice on Tuesday. It is no help for the folder you find missing eighteen months later.
So cloud storage is safe from the provider losing your data, and not safe from you losing it. The fix is a backup rather than more storage — something that keeps versions your everyday machine cannot destroy. Backblaze Computer Backup is $99 a year per computer for unlimited backup, and the full reasoning is in cloud storage vs backup.
Is your own computer safer?
Almost always no, though people find this counterintuitive.
A laptop can be stolen, dropped, spilled on, or simply fail. Most people have no second copy, so a single hardware failure is total loss. Cloud providers, whatever their other faults, do not lose your data to a dropped bag.
The right framing is not local versus cloud. It is how many independent copies exist, and the answer should be more than one.
What to actually do
- Turn on two-factor authentication for the account holding your files. This is the single highest-value action available and it takes five minutes.
- Use a unique password for that account. If it is your email, it is the master key to your digital life.
- Put genuinely sensitive documents in an end-to-end encrypted service. Proton Drive's free 5GB is enough for the documents that qualify.
- Add a real backup for anything irreplaceable. Around $99 a year per machine.
- Keep one copy somewhere neither provider controls — an external drive updated occasionally and stored elsewhere.
- Test a restore once. An untested backup is a belief rather than a protection.
The honest summary
Confidentiality: good enough for almost everything, with the caveat that mainstream providers can technically read your files. If that matters for specific documents, encrypt those end-to-end rather than moving everything.
Durability: weaker than people assume, not because providers are unreliable but because sync faithfully copies your mistakes. This is the risk that will actually cost you something, and it is the one almost nobody addresses.
If you are choosing a service, the free allowances are compared in the best free cloud storage, and for a business the admin controls that matter are in the best cloud storage for a small business.
Questions people ask
Is cloud storage safe?
For confidentiality, yes for most purposes - major providers encrypt data in transit and at rest and run security operations far beyond what an individual could. For durability, less than people assume, because sync propagates deletion. The realistic risk to your files is your own account being compromised or your own mistake, not the provider being breached.
Can Google or Dropbox read my files?
Technically yes. Mainstream services hold the encryption keys, which is what enables search, previews and in-browser editing. They have policies restricting access and they comply with legal process. If you want files no provider can read, you need end-to-end encryption, which Proton Drive offers by default.
What is the difference between encrypted and end-to-end encrypted?
Standard encryption protects your files in transit and while stored, but the provider holds the keys and can decrypt them. End-to-end means the keys never leave your devices, so the provider stores data it cannot read. The trade is that features depending on reading your files - search, previews, collaborative editing - become limited or impossible.
Is it safer to store files on my own computer?
Generally no. A laptop can be stolen, dropped, or have its drive fail, and most people have no copy. Major providers run redundancy and security operations an individual cannot match. The sensible arrangement is not choosing between them - it is having your files in more than one place.
What should I not put in cloud storage?
Anything you would be seriously harmed by if the provider were compelled to hand it over, or if your account were taken over - and where you have not used end-to-end encryption. In practice: identity documents, financial records and anything covered by a professional confidentiality duty belong in an end-to-end encrypted service rather than a mainstream one.
Where this information comes from
Product details change often. Each item below links to the primary source we checked, so you can confirm anything that matters to your decision.
Spotted something out of date or incorrect? Tell us and we will fix it.