Cloud storage, sharing, and recovery checklist

What to take away

• Review account access, devices, apps, and recovery methods.
• Confirm which files are local, online-only, synchronized, shared, or independently backed up.
• Test version history and deleted-item recovery before an emergency.
• Disconnect offline backup media when the design depends on separation.
• Preserve an export path and subscription record.

Run the short checks monthly and a full restore and export review quarterly. Complete the event sections before travel, account closure, device sale, or family-role changes. What sync, sharing, versions, and retention each mean is explained in cloud storage basics.

Account controls

• Use a unique password.
• Enable multi-factor authentication.
• Store recovery codes away from synchronized folders.
• Confirm recovery email, phone, and trusted devices.
• Remove unknown sessions and unused connected apps.
• Separate personal, family, work, and school accounts.
• Record the subscription owner and renewal method.

File-state review

• Identify online-only files.
• Mark travel files for offline access.
• Open samples with networking disabled.
• Check synchronization status and unresolved conflicts.
• Confirm upload of recent large files.
• Inspect storage quota and pending deletions.
• Find app data that is not stored in ordinary folders.

The Library of Congress personal archiving overview treats digital preservation as an active process involving selection, organization, formats, description, copies, and continued management. Use that wider view for family records rather than trusting a green sync icon forever. Preservation, backup, sync, and sharing are separated in file sync, backup, archive, and sharing compared.

Sharing review

• List public and anyone-with-link shares.
• Remove former collaborators.
• Reduce edit access to view access where suitable.
• Set expiration on temporary shares if supported.
• Test sensitive links in a signed-out browser.
• Review shared folders that other people own.
• Record content downloaded outside the service.

Recovery review

• Record version-history retention.
• Record deleted-item retention.
• Restore one file from an older version.
• Recover one harmless deleted test file.
• Confirm recovery without the primary device.
• Check whether permanently deleted items are excluded.
• Document support escalation and identity proof.

Independent backup

• Keep a copy outside the synchronization path.
• Encrypt sensitive portable media.
• Disconnect offline media after a verified run.
• Protect the remote backup with separate credentials where practical.
• Review exclusions and failed jobs.
• Test restored files in their required applications.

CISA's consumer training on protecting data stored on devices recommends backups and warns that leaving an external drive connected can let ransomware reach it. It also advises evaluating the trustworthiness and security of cloud services. Separation must exist in practice, not only in a diagram. What that separation looks like in a household design is set out in how to build a personal backup system.

Privacy and lifecycle

• Review provider privacy and retention terms.
• Check region or organization requirements.
• Remove metadata before public sharing when needed.
• Confirm what account closure deletes and when.
• Download an export in a usable format.
• Preserve file dates, names, folders, and descriptions.
• Plan access for incapacity or death.

Before travel

Download required files, test them offline, carry recovery material separately, review roaming costs, and avoid changing the only multi-factor device during the trip. Which methods leave you holding a spare is compared in passwords, passkeys, and MFA compared.

Before canceling

Export originals, verify counts and samples, transfer ownership of shared work, revoke links, preserve invoices, and wait until the new copy and backup pass restore tests.

Common questions

Why test in a signed-out browser?

Your normal session may have owner access. A signed-out test reveals whether a link is public or requires the intended identity.

Should I keep every file offline?

No. Choose based on device capacity, travel needs, importance, and recovery plan.

Does encryption replace access review?

No. Authorized recipients and compromised accounts may access decrypted content. Encryption and permissions solve different problems.

What if the storage quota is full?

New uploads and synchronization may stop. Preserve important files, identify what consumes space, and avoid random deletion across synchronized devices.