Prevention

Avoid an iCloud Security Breach

By Jeanne Feldkamp

Laptops, smartphones and tablets are all about freedom -- freedom from wires, heavy equipment and location constraints. But until Apple’s iCloud came along, there was no easy way to get access to all of your email, music and documents from all of your mobile devices without physically connecting and syncing them. Apple’s latest game-changing technology is designed so that all your digital content can follow you, automatically and seamlessly, wherever you go. (ICloud can keep your Apple mobile devices and Apple computer in sync, but it can also sync content on your Apple mobile devices with your Windows-based PC. Some PC manufacturers have recently announced similar cloud-synching programs for their products too.)

Behind the scenes, though, things are a little more complicated. Keeping all of your content synced across all of your devices means the master copies of all your files must be stored centrally, in the iCloud. When you want to access one of your photos from your iPad, for example, the iPhoto app uses your Apple ID and password to pull the content from iCloud and send it to your screen. If you edit the photo, iCloud will update the file centrally and make the edited version available on all your devices.

This service can undoubtedly be a major timesaver, but it raises some questions about privacy as well. How are your files sent across the network? Are they safe when they’re stored in the iCloud? And what can you do to protect your own privacy?

Defend Your Devices Against Loss and Theft
According to Christopher Plath of Geek Squad, the best way to protect the privacy of your iCloud content is simple: Keep track of all your mobile devices.

“Physical security of the device sending data to the cloud is of utmost concern,” says Plath. “Anyone with physical access to the device connected to the cloud has access to the data.” And if you set up iTunes to remember your password so you don’t have to type it in each time, access to all your iCloud-based data is wide open to anyone who steals or finds your device. Plath’s advice: “For the best security, do not allow others access to your device, and do not have it remember access passwords.”

If the worst happens and one of your devices goes missing, the Find My iPhone app can help you prevent a privacy breach (so make sure you install it on all of your iOS devices). If you lose one device, just open the app on another iOS device and sign in with your Apple ID. The app will locate your missing device on a map and give you the option to remotely lock the lost device or wipe its data.

Use a Unique, Nonobvious Password
If you are unlucky enough to lose a device or have it stolen, your best defense against a privacy breach is your password. So make sure you create a strong one. “Use long non-dictionary passwords with special symbols -- such as the question mark, the exclamation point or the pound sign -- to make it difficult to guess,” says Plath.

For an extra layer of security, you can use the Settings to create separate Apple IDs for your iTunes store purchases and your iCloud services. That way, even if your iTunes password is compromised, your iCloud data is still secure.

Use Secure Wireless Networks
Apple encrypts all the files you send to iCloud and stores them in an encrypted format. Still, warns Plath, “individuals who are especially concerned with high-level security should not push sensitive data to the cloud over networks that you do not control, such as coffee-shop wireless hot spots.” Instead, use your own home network or one that requires a password.

Encrypt Sensitive Documents, Even on Your Hard Drive
Although Apple encrypts your data to store it in the iCloud, the company -- like all cloud providers -- may still be compelled to turn over your data to authorities if it is subpoenaed in a court case. For extra privacy protection, save sensitive documents -- such as health care records and anything related to your job -- in an encrypted format, even on your own hard drive.

“Although unlikely, the possibility always exists that anything you put out onto the cloud may be compromised by a third party,” says Plath. “Accidents happen, and they can cost your business untold hardship if sensitive data gets compromised.”

Photo Credit: @iStockphoto.com/skodonnell