Is it recommended to encrypt files stored via cloud. For example, although certain cloud repositories encrypt data in transit - should I still use a secondary encryption tool for cloud storage?

thanks :)


Depends on what your needs are.

Do you trust the cloud storage provider to have implemented encryption in transit and in rest correctly?

Do you trust that the cloud storage provider won't access the files themselves, or allow others to access them (on purpose or through hacking) - if that is possible with the security model chosen by the cloud storage provider?

If not, you could consider encrypting the files themselves before you place them in the cloud. Is it worth it for a copy of last year's birthday greetings card for Aunt Betty? Is it worth it for a copy of the book keepings of your company?

It really depends on what you need to store (how sensitive it is) and how much hassle you can live with to mitigate the risk of having the cloud storage provider's security (or lack of) broken.

If you do choose to encrypt, it will give you more hassle as you'll need to manually encrypt and decrypt files in order to access them - or rig some kind of automated system for doing the same, without sacrificing security.

| improve this answer | |
  • thank you! the reply was extremely helpful - although funny, your specific example of "Aunt Betty" and additional management task re: encrypting helped to answer my question. – Bryan Mixer Oct 28 '18 at 22:14
  • @BryM Good to hear! - Please mark the answer as accepted, if your question was answered! – jksoegaard Oct 29 '18 at 13:44
  • apologies to ask such an inane questions, but did I mark the question as answered correctly? I checked the green-flag by the question, but as this is my first question I'm not sure how to fully mark it closed. thanks :) – Bryan Mixer Nov 2 '18 at 22:54
  • Yes, that’s correct :-) – jksoegaard Nov 3 '18 at 7:31

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .