all-in-one privacy solution":["O Proton Unlimited é uma solução única de privacidade"],"Black Friday":["Black Friday"],"No ads. Privacy by default.":["Sem anúncios. Privacidade por padrão."],"People before profits":["Pessoas acima do lucro"],"Security through transparency":["Segurança por meio da transparência"],"The best Proton Mail ${ BLACK_FRIDAY } deals":["As melhores ofertas de ${ BLACK_FRIDAY } do Proton Mail"],"The world’s only community- supported email service":["O único serviço de e-mail do mundo apoiado pela comunidade"]},"specialoffer:limited":{"${ hours } hour":["${ hours } hora","${ hours } horas"],"${ hoursLeft }, ${ minutesLeft } and ${ secondsLeft } left":["${ hoursLeft }, ${ minutesLeft }, e ${ secondsLeft } restantes"],"${ minutes } minute":["${ minutes } minuto","${ minutes } minutos"],"${ seconds } second":["${ seconds } segundo","${ seconds } segundos"],"Limited time offer":["Oferta por tempo limitado"]},"specialoffer:listitem":{"Create multiple addresses":["Crie vários endereços"],"Hide-my-email aliases":["Use aliases do hide-my-email"],"Quickly unsubscribe from newsletters":["Cancele a assinatura de newsletters rapidamente"],"Use your own domain name":["Use seu próprio nome de domínio"]},"specialoffer:logos":{"As featured in":["Destaques"]},"specialoffer:metadescription":{"Get an encrypted email that protects your privacy":["Obtenha um e-mail criptografado que proteja sua privacidade"]},"specialoffer:metatitle":{"Proton Mail Black Friday Sale - Up to 40% off":["Oferta de Black Friday do Proton Mail - Até 40% de desconto"]},"specialoffer:newmetadescription":{"Get up to 40% off Proton Mail subscriptions this Black Friday. Find great deals on our secure end-to-end encrypted email plans.":["Obtenha até 40% de desconto nas assinaturas do Proton Mail nesta Black Friday. Confira ótimas ofertas em nossos planos de e-mail seguro com criptografia de ponta a ponta."]},"specialoffer:newmetatitle":{"Proton Mail Black Friday sale | Up to 40% off secure email":["Oferta de Black Friday do Proton Mail - Até 40% de desconto no e-mail protegido"]},"specialoffer:note":{"* Billed at ${ TOTAL_SUM } for the first year":["* Com o preço de ${ TOTAL_SUM } no primeiro ano"],"*Billed at ${ TOTAL_SUM } for the first 2 years":["*Com o preço de ${ TOTAL_SUM } nos primeiros dois anos"],"30-day money-back guarantee":["Garantia de reembolso de 30 dias"],"Billed at ${ TOTAL_SUM } for the first 2 years":["Com o preço de ${ TOTAL_SUM } nos primeiros dois anos"],"Billed at ${ TOTAL_SUM } for the first year":["Com o preço de ${ TOTAL_SUM } no primeiro ano"],"You save ${ SAVE_SUM }":["Economize ${ SAVE_SUM }"]},"specialoffer:off":{"${ PERCENT_OFF } off":["-${ PERCENT_OFF }"]},"specialoffer:testimonial":{"I love my ProtonMail":["Adoro ProtonMail"],"My favorite email service":["Meu serviço favorito de e-mail"],"Thanks Proton for keeping us all safe in the complicated internet universe.":["Agradecemos ao Proton por nos manter a salvo no complicado universo da internet."],"You get what you pay for. In the case of big tech, if you pay nothing, you get used. I quit using Gmail and switched to @ProtonMail":["Você recebe pelo que paga. No caso das grandes tecnologias, você se acostuma quando não paga nada. Parei de usar o Gmail e troquei para o @ProtonMail"]},"specialoffer:time":{"Days":["Dias"],"Hours":["Horas"],"Min":["Min"]},"specialoffer:title":{"And much more":["E muito mais"],"Make your inbox yours":["Deixe a caixa de entrada do seu jeito"],"Safe from trackers":["A salvo de rastreadores"],"Stay organized":["Mantenha-se organizado"],"Black Friday email deals":["Ofertas de e-mail da Black Friday"],"Don’t just take our word for it":["Não confie apenas em nossa palavra"],"Our story":["Nossa história"],"Transfer your data from Google in one click":["Transfira seus dados do Google com um clique"]},"specialoffer:tooltip":{"Access blocked content and browse privately. Includes ${ TOTAL_VPN_SERVERS }+ servers in ${ TOTAL_VPN_COUNTRIES }+ countries, connect up to 10 devices, access worldwide streaming services, malware and ad-blocker, and more.":["Acesse conteúdo bloqueado e navegue com privacidade. Inclui mais de ${ TOTAL_VPN_SERVERS } servidores em mais de ${ TOTAL_VPN_COUNTRIES } países, conexão com até 10 dispositivos, acesso a serviços de streaming do mundo todo, um bloqueador de anúncios e malware e muito mais."],"Easily share your calendar with your family, friends or colleagues, and view external calendars.":["Compartilhe facilmente seus calendários com amigos, familiares ou colegas e visualize calendários externos."],"Includes support for 1 custom email domain, 10 email addresses, 10 hide-my-email aliases, calendar sharing, and more.":["Inclui suporte para 1 domínio de e-mail personalizado, 10 endereços de e-mail, 10 aliases do hide-my-email, compartilhamento de calendário e muito mais."],"Includes support for 3 custom email domains, 15 email addresses, unlimited hide-my-email aliases, calendar sharing, and more.":["Inclui suporte para 3 domínios de e-mail personalizados, 15 endereços de e-mail, aliases ilimitados do hide-my-email, compartilhamento de calendário e muito mais."],"Manage up to 25 calendars, mobile apps, secured with end-to-end encryption, 1-click calendar import from Google, and more.":["Gerencie até 25 calendários, apps para dispositivos móveis, protegidos com criptografia de ponta a ponta, importação de calendário com 1 clique do Google e muito mais."]},"Status banner":{"Learn more":["Saiba mais"],"Please note that at the moment we are experiencing issues with the ${ issues[0] } service.":["No momento, estamos com problemas no serviço ${ issues[0] }."],"We are experiencing issues with one or more services at the moment.":["No momento, estamos com problemas em um ou mais serviços."]},"Status Banner":{"At the moment we are experiencing issues with the Proton VPN service":["No momento estamos enfrentando problemas com o serviço Proton VPN"],"Learn more":["Saiba mais"]},"suggestions":{"Suggestions":["Sugestões"]},"Support":{"Sub category":["Subcategoria","Subcategorias"]},"Support article":{"${ readingTime } min":["${ readingTime } min","${ readingTime } min"],"Category":["Categoria","Categorias"],"Didn’t find what you were looking for?":["Não encontrou o que procura?"],"General contact":["Contato geral"],"Get help":["Obter ajuda"],"Legal contact":["Contato jurídico"],"Media contact":["Contato de mídia"],"Partnerships contact":["Contato de parcerias"],"Reading":["Leitura"]},"Support troubleshooting":{"App version":["Versão do aplicativo"],"Browser":["Navegador"],"Check if this helps":["Confira se isso ajuda"],"Choose a product":["Selecione um produto"],"Did this solve your issue?":["Isso resolveu seu problema?"],"Faster assistance is just a few clicks away":["Assistência mais rápida a apenas alguns cliques de distância"],"How can we help?":["Como podemos ajudar?"],"No, contact support":["Não, entrar em contato com o suporte"],"Please fill out one field after another":["Preencha os campos em sequência"],"Please make your selections":["Faça suas seleções"],"Proton account":["Conta Proton"],"Proton for Business":["Proton for Business"],"Thank you for your feedback":["Agradecemos pelo feedback"],"What can we help with?":["Com o que podemos ajudar?"],"Yes":["Sim"]},"support_modal_search_query":{"Search query":["Consulta de pesquisa"]},"support_search_button":{"Search":["Pesquisar"]},"support_search_i_am_looking_for":{"I'm looking for":["Estou procurando"]},"SupportForm":{"For a faster resolution, please report the issue from the Bridge app: Help > Report a problem.":["Para uma resolução mais rápida, informe o problema no aplicativo Bridge: Ajuda > Comunicar um problema."],"Information":["Informações"]},"SupportForm:option":{"Account Security":["Segurança da conta"],"Contacts":["Contatos"],"Custom email domain":["Domínio de e-mail personalizado"],"Email delivery and Spam":["Entrega de e-mail e spam"],"Encryption":["Criptografia"],"Login and password":["Início de sessão e senha"],"Merge aliases and accounts":["Combinar alias e contas"],"Migrate to Proton":["Migrar para a Proton"],"Notifications":["Notificações"],"Other":["Outros"],"Plans and billing":["Planos e faturamento"],"Proton for Business":["Proton for Business"],"Sign up":["Criar conta"],"Storage":["Armazenamento"],"Users, addresses, and identities":["Usuários, endereços e identidades"]},"SupportForm:optionIntro":{"Select a topic":["Selecione um tópico"]},"swiss_baseed_feature":{"Swiss based":["Sediado na Suíça"]},"Testimonial":{"Awards":["Prêmios"],"Customers":["Clientes"],"Featured":["Em destaque"],"Go to testimonial source":["Ir para a página inicial de depoimentos"],"Reviews":["Avaliações"],"Videos":["Vídeos"]},"Text":{"If you need help, check out our ${ supportLink }.":["Se precisar de ajuda, confira nossa ${ supportLink }."],"The page you’re looking for might have been removed, or it could be an\nold link.":["É possível que a página que você está procurando tenha sido removida ou seja um\nlink antigo."]},"Title":{"On this page":["Nesta página"],"Related articles":["Artigos relacionados"],"Share ${ thisPage }":["Compartilhar ${ thisPage }"],"Thank you!":["Obrigado!"],"this page":["esta página"]},"Tooltip":{"More information":["Mais informações"]},"tooltip_vpn":{"Access blocked content and browse privately. Includes ${ TOTAL_VPN_SERVERS }+ servers in ${ TOTAL_VPN_COUNTRIES }+ countries, highest VPN speed, ${ TOTAL_VPN_CONNECTIONS } VPN connections, worldwide streaming services, malware and ad-blocker, and more.":["Acesse conteúdo bloqueado e navegue com privacidade. Inclui mais de ${ TOTAL_VPN_SERVERS } servidores em mais de ${ TOTAL_VPN_COUNTRIES } países, a maior velocidade de VPN, ${ TOTAL_VPN_CONNECTIONS } conexões VPN, serviços de streaming do mundo todo, bloqueador de anúncios e malware e muito mais."]},"wallet_signup_2024:Action":{"Get Proton Wallet":["Obtenha o Proton Wallet"]},"wallet_signup_2024:Homepage hero product link title":{"Wallet":["Wallet"]},"wallet_signup_2024:Homepage product navigation bar":{"Wallet":["Wallet"]},"wallet_signup_2024:menu item":{"Bitcoin guide":["Guia sobre bitcoins"],"Proton Wallet news":["Novidades do Proton Wallet"],"Proton Wallet support":["Suporte do Proton Wallet"]},"wallet_signup_2024:Pricing":{"Includes everything in Proton Unlimited and":["Inclui todos os recursos do Proton Unlimited e"],"Limited availability":["Disponibilidade limitada"],"The easiest way to securely own, send, and receive Bitcoin":["A maneira mais fácil de guardar, enviar e receber bitcoins com segurança"]},"wallet_signup_2024:ProductRange":{"Discover Proton Wallet":["Conheça o Proton Wallet"],"Store and transact Bitcoin privately with an encrypted self-custody wallet.":["Guarde e negocie bitcoins de modo privado usando uma carteira com autocustódia criptografada."]},"wallet_signup_2024:wallet bitcoin":{"Learn about Bitcoin, the Internet's value network.":["Saiba mais sobre bitcoins, a rede de valor da internet."]},"wallet_signup_2024:wallet overview":{"Ensure you're always in control of your Bitcoin.":["Tenha certeza de ter sempre o controle das suas bitcoins."]},"wallet_signup_2024:wallet security":{"The encrypted, open-source wallet that puts you in control.":["A carteira criptografada e de código aberto que coloca você no controle."]}}},"base":"blog","cdn":{"enabledForAssets":true,"enabledForImages":false,"url":"https://pmecdn.protonweb.com/"},"unleashApi":"https://account.proton.me/api"};
window.frameworkContext = frameworkContext;
window.__toAssetUrl = (filename) => {
if (frameworkContext.cdn !== undefined && frameworkContext.cdn.enabledForAssets === true) {
return `${frameworkContext.cdn.url}${frameworkContext.base}/${filename}`;
} else {
return `/${frameworkContext.base}/${filename}`;
}
};
})();
5 cloud storage security risks and how to avoid them | Proton
Cloud storage is extremely safe. It’s arguably less risky than physical storage on your local device. But that doesn’t mean there are no security risks. We’ve identified a few key risks you should be aware of and explain how to mitigate them.
First, a definition: Cloud storage is a method of storing and accessing data and files on remote servers you access over the internet instead of locally on physical devices you control. When people say “the cloud”, they’re referring to these remote servers, which are most commonly maintained and controlled by computing providers.
Storing data on the cloud is generally very safe. All major providers use powerful encryption and strict access controls. But as we’ll see below, some storage providers are more secure than others.
By far the most common security risk is that someone will break into your account and steal your files. If an attacker can obtain the username and password for your storage service, they can steal your data. Phishing attacks(new window) and malware(new window) are among the ways hackers can breach your account. Your credentials can also be exposed in a data breach and end up on the dark web. If you use a weak password or the same password for multiple accounts, hackers may be able to break into your cloud storage.
Precautions to prevent account compromise
Two-factor authentication (2FA) — Most cloud storage providers offer 2FA, which lets you add an extra layer of authentication when logging in to your account. This is one of the most effective ways to protect your accounts. With 2FA enabled, you’ll be asked to present a security key or enter a one-time password that was generated on a 2FA app or sent to your phone or email after entering your username and password. Learn more about 2FA(new window)
Password manager — Consider using a password manager to securely store and generate unique passwords for your cloud storage accounts. Password managers let you create and autofill complex passwords. Proton Pass also lets you generate email aliases for your accounts so that you can protect your real email address.
Beware of phishing attempts — Never trust emails or text messages from unknown senders or even unexpected messages from senders you recognize. Hackers can spoof email addresses or create email contents that seem legitimate. Whenever you receive a message from an online service, it’s a good idea to go to that provider’s website directly to log in rather than clicking on the link in the email. Proton Mail offers a suite of phishing safeguards(new window) that help prevent security mistakes.
Monitor account activity — Regularly review your cloud storage account activity and notifications. If you notice any suspicious or unauthorized activity, report it immediately to your cloud storage provider.
Secure your devices — Protect your devices with strong passwords or biometric authentication, and ensure they are updated with the latest security patches.
2. Inadequate privacy
Security and privacy aren’t the same thing, but poor privacy protections can lead to security failures. There are a few ways this can happen. If your cloud storage provider has access to your data, there’s a risk of unauthorized access either through a data breach or a rogue employee. Poor privacy protections can also result in your files’ metadata being exposed. And as we’ll discuss more in #5, integrations with third-party services can lead to security failures beyond the walls of your cloud service.
Precautions to protect your privacy
Use a privacy-focused cloud storage solution — Unlike the security measures listed above, privacy mainly comes down to the cloud storage provider you choose. The best technical safeguard for ensuring your privacy is end-to-end encryption(new window), which locks files on your device before they’re ever sent to the cloud. Any service that retains a key to access your data is not truly private. Proton Drive protects all file information with end-to-end encryption so that we never have access to your data.
3. Data breach
Most cloud providers use strong security measures, and data breaches are rare. But there’s always a risk, and data breaches have happened before. Hackers or insiders can gain access to the company’s servers and steal user data. As a customer, there’s not much you can do to prevent this. But you can choose services that take proper security measures.
Prevent data breaches
Choose a service with end-to-end encryption — As mentioned above, end-to-end encryption means your data is encrypted on your device before it’s uploaded to the cloud. So if there’s a data breach, hackers can only get their hands on encrypted files. Some cloud storage services may encrypt the contents of your files but not the metadata, such as file names and file types.
4. Unintentional sharing
Human error is a common cause of data breaches. You or someone in your organization might cause a data breach by simply sharing a file with the wrong person. This can happen if you type an email address incorrectly or set the wrong privacy permissions on a file link.
How to avoid unintentional sharing
Carefully review sharing settings — Make sure you understand how to configure your cloud service’s share settings. Most providers offer different levels of access permissions, ranging from no access (for example, a password-protected file) to some access (view but not edit permissions) to full edit permissions.
Double-check your recipients — You can accidentally expose your data to a stranger with a single typo, so always verify your recipients before sharing.
Set passwords on sharing links — An easy way to mitigate sharing errors is to set a password on your file-sharing links(new window) and communicate the password with your recipient in a separate message. This way even if you mistakenly send the link to the wrong person, the file is still protected by a password.
5. Increased attack surface
Attack surface refers to the potential points of vulnerability that malicious actors can target. Since you’re entrusting your files to a separate company with its own infrastructure, storing your data in the cloud will generally expand your attack surface compared to local storage on your devices, especially if you use the cloud for collaboration or use third-party integrations.
Defend your attack surface
Minimize third-party integrations — Each integration introduces potential security vulnerabilities. Only use trusted and reputable integrations from known providers. Regularly review and remove unnecessary integrations.
Keep your software up to date — Software updates usually include security patches that respond to the newest known threats. So keep your cloud storage apps, browsers, and operating systems up to date.
Use zero-knowledge encryption — Look for cloud storage providers that offer zero-knowledge encryption, which includes strong protocols such as end-to-end encryption to protect your files. The result is that only you have access to the encryption keys, and even the service provider cannot access your data. Learn about zero-knowledge cloud storage(new window)
Conclusion
Almost everyone uses the cloud in some way, whether it’s for email, social media, or simply backing up files. This ease of use has also created a sense that security in the cloud is also easy. However, your data is only as safe as your account and the service provider you use.
We developed Proton Drive to prevent the most common security risks as part of our end-to-end encrypted ecosystem of services.
Starting with your account security, you can enable two-factor authentication either with an authenticator app on your smartphone or with U2F or FIDO2 security key.
Proton lets you monitor account access attempts, so you’ll know if anyone else tries to enter your account.
You can set the level of access on your file-sharing links and secure them with a password.
You can also turn off file-sharing links at any time or set them to expire at a custom date and time.
Additionally, Proton Drive uses open-source code, which means anyone can verify our apps encrypt your files’ contents and metadata in the way we say they do. This also reduces the risk of unknown vulnerabilities in our code. Our apps have all undergone third-party security audits.
There are additional security benefits to using Proton Drive alongside our other encrypted apps, such as Proton Mail, Proton Calendar, Proton Pass, and Proton VPN. For example, Proton Mail has strong anti-phishing protections and uses end-to-end encryption, which can increase the security of your cloud storage account and your file-sharing links. With Proton Unlimited, you get access to all of these apps.
In response to popular demand, our privacy-first AI writing assistant Proton
Scribe is now available for free on our Duo and Family plans, in nine different
languages.
Proton Drive provides private and secure file sharing, document editing, and
cloud storage for businesses of all sizes. Take control of your company's data.