Securing Your Cloud Accounts and Data
From email to file storage, most of what you rely on daily now lives in the cloud. Here's how to keep those accounts, and the personal data inside them, genuinely secure.
Cloud services, such as email, file storage, photo backups, and business tools, mean your data no longer lives on only one device. "The cloud" simply means other companies' computers that you reach over the internet. That is convenient, but a single compromised account can expose everything connected to it. Securing your cloud accounts is one of the highest-leverage things you can do for your digital safety.
Know what you actually have in the cloud
Start with a simple inventory. Most people are surprised how much is up there once they list it:
| What | Examples | Why it matters |
|---|---|---|
| Gmail, Outlook, iCloud Mail | The "master key": password-reset links for other accounts arrive here | |
| File storage and backups | Google Drive, iCloud, Dropbox, OneDrive | Holds documents, ID scans, and records |
| Photos and videos | Google Photos, iCloud Photos | Years of private memories, often with location data |
| Work tools | Accounting, shared documents, chat | Business and client information |
| Connected apps | Anything you opened with "Sign in with Google/Apple/Microsoft" | Each one holds a key to part of your account |
The essentials for every cloud account
- A strong, unique password for each account, kept in a password manager↗.
- Two-factor authentication↗ turned on, especially for email and file storage.
- Review connected apps regularly. Over the years people grant access to dozens of third-party apps they no longer use, and each is a possible way in. Check your account's security settings for "Connected apps" or "Third-party access" and remove anything unfamiliar.
- Check active sessions. Most services show every device currently signed in. Sign out of anything you do not recognize.
- Keep recovery options current. Make sure your backup↗ email and phone number are up to date, so you can get in if you are locked out, and so a stranger cannot.
Sharing files safely
Cloud storage makes sharing effortless, sometimes too effortless. Before you share a file or folder:
- Check whether the link is set to "anyone with the link" or to "specific people". The first means anyone who receives or finds the link can open it.
- Set an expiry date on shared links where the service allows it.
- Remove sharing when a project ends, instead of leaving it open forever.
- Avoid keeping highly sensitive data, such as ID scans and financial documents, in a general shared folder without extra protection.
A worked example
Years ago you tried a free photo-editing app and signed in with your Google account. You forgot about it. Last year the app's maker was breached, and the stolen access tokens let attackers read the photos you had given it permission to see. A five-minute review of connected apps, removing the ones you no longer use, would have closed that door.
What "personal data" really means here
Personal data is not just your name and address. It includes anything that can identify or profile you: location history, browsing habits, health information, financial records, and even metadata such as when and where a photo was taken. Cloud services collect more of this than most people realize. It is worth reviewing your privacy settings from time to time and downloading a copy of your data (most major providers offer this) to see exactly what is stored about you. 
A twice-a-year checkup
- ☐ Remove connected apps you no longer use
- ☐ Sign out of unknown devices
- ☐ Review who can see shared files and folders
- ☐ Check that your recovery email and phone number are current
- ☐ Confirm two-factor authentication is still on
Your cloud accounts are only as strong as their weakest connected app. Review access at least twice a year.
Related reading
