nullpay.
Back to toolkit
DeviceIntermediate15 miniosandroid

Cloud Backup Audit

Risk

The risk

Why this matters

Full-disk encryption on your phone is moot if iCloud or Google automatically backs up photos, messages, and app data in a form Apple/Google can access. Cloud backup is the #1 law enforcement access path. You encrypted your phone, then handed the keys to Apple.

Recommended tools

What to use

Cryptomator
CryptomatorOSSFree

Client-side encryption vault. Encrypt before uploading to any cloud.

Nextcloud
NextcloudOSSFree

Self-hosted cloud platform. Full control over your backups.

Setup guide

How to set it up

  1. 1

    On iOS: Enable Advanced Data Protection (Settings → [Your Name] → iCloud → Advanced Data Protection)

  2. 2

    This enables E2EE for iCloud backups — Apple can no longer access them

  3. 3

    Consider local encrypted backups instead of cloud backups

  4. 4

    Disable automatic photo upload to non-E2EE cloud services