For anyone who goes with the iDrive option, here are a few very helpful points you should understand in order to maximize the security options iDrive offers.
iDrive is based in the US (as many online storage companies are), so it is subject to complying with any US government agency when requested…meaning they can give access to your backed up data. This is standard with any US based company as it is the law (just like any other company based in another county is subject to the laws of that country when it comes to accessing your online stored data), so it is not a slam on iDrive at all, but is important for you understand.
I use my Plex not only for our collection of Movies and TV series we own on DVD/BluRays but I also use it store all of our family pictures and digital home movies/videos. Plus I when I back things up, I also back up all my personal information like tax returns, important documents, etc… So I prefer to keep our backups as secure and private as possible.
Their security options is where iDrive has always been an attractive option for me. When you set up your iDrive it is encrypted. But iDrives gives you a choice of WHO holds the key to the encryption…either iDrive or YOU.
If you chose that iDrive holds the encryption key they can access all your data if they were ever pressed to do so by any authorized US gov agency or I guess even by some rogue employee who just wanted to snoop around, because they have the key to decrypt your data. This, believe it or not, is the standard and many times the ONLY option with many other online storage companies.
But if you chose that YOU (client) hold the key then iDrive can never access your backup data…even if the US gov demanded that they do it or a rogue employee just wanted to explore. So since YOU create and hold the key, your data is encrypted BEFORE it is sent to iDrive and is only decrypted AFTER iDrive sends your data back to you. This is call client side or client end to end encryption (you being the client). iDrive never knows what the encryption key is.
BUT…there are two things you MUST never do if YOU hold the encryption key
-
Never forget what your encryption key is (the encryption key is basically a really lllllloooonnnggg password). If you loose or forget your encryption key, you will never be able to access your backups. Use a password manager or something to help keep it safe but is available for you to look up when you need it.
-
Only access your data via the iDrive software app…NEVER access your data via a browser. When you use the iDrive software the encryption/decryption only takes place on your end. When you use a Browser it has to share your encryption key with the iDrive servers, which then gives them your personalized encryption key.
One last note… you have to make the decision to have iDrive control your encryption key or that YOU control the encryption key when you first set up your account. If you change your mind later about who owns the encryption key then all your data will have to deleted in order to convert to your new encryption option. So…If you decide to have iDrive control it and then realize how much more secure it would be if you owned the encryption key and change it to you controlling the encryption key they have to delete all of your backups and you have to start over backing everything up because everything has to be re-encrypted with your new key you created and now control. SO choose wisely when you first set up your iDrive account.
Again, the ability to have client end to end encryption is a HUGE bonus with iDrive that majority of the other online storage companies (including Backblaze) either don’t offer at all or only include in their expensive business plans only.
