In our daily lives, cloud storage has become an integral part of our routine. With numerous available platforms, we can conveniently store files of various types and access them remotely. However, it’s essential to acknowledge the potential risks that come with it. There’s always a possibility that our files could be compromised, falling into unauthorized hands. In this article, we discuss how Microsoft‘s cloud service, OneDrive, handles password-protected ZIP files.
When it comes to safeguarding sensitive documents from unauthorized access, one common approach is to create a ZIP file and secure it with a password. However, it’s worth noting that OneDrive, as a cloud platform, possesses the ability to scan these encrypted files and view their contents, despite the encryption.
OneDrive tracks protected files
Microsoft cloud services, such as OneDrive and SharePoint, have recently implemented a feature that tracks password-encrypted ZIP files. This development aims to enhance security measures; however, it also raises concerns regarding privacy.
The reason behind this implementation is related to the growing use of password-encrypted files by hackers to evade antivirus detection. By encrypting malicious software with a password, they can bypass detection by many antivirus engines. When the victim enters the password to access the content, they unknowingly expose themselves to potential risks.
A security researcher discovered that Microsoft’s cloud services have identified certain password-encrypted ZIP files as malware. These files were initially shared by the researcher with coworkers as samples of malicious software.
Consequently, if you share password-protected ZIP files through OneDrive or SharePoint, the platform will have the ability to track and analyze the content. This is particularly significant if you use a weak or commonly used password, which can be easily guessed, further compromising the security of the files.
How to prevent tracking of protected files
Fortunately, there are still options available to encrypt your files with a password and prevent OneDrive from tracking them. One such option is using the 7-Zip program, which is free and open source, and supports AES-256 encryption. To ensure maximum security, it is crucial to create a unique password that is complex and not commonly used.
A strong password should consist of a combination of uppercase and lowercase letters, numbers, and special symbols. Additionally, it is recommended to choose a password of sufficient length, as longer passwords are generally more secure. Password managers can be helpful in generating unique and highly secure passwords.
By following these recommendations, you can increase the likelihood that your files uploaded to the cloud will remain untracked. However, it is important to note that any file uploaded to the internet, regardless of the platform, carries some inherent risk. While you can add passwords to files like Word documents, there may still be potential risks involved.
As discussed, Microsoft has the capability to scan password-protected ZIP files uploaded to services like OneDrive. However, by employing strong encryption methods as outlined above, you can make the tracking process more challenging for them.
