Nextcloud servers encrypt remote data, but your local storage operates without encryption by default. Nextcloud also offers server-side encryption, which is not enabled out of the box (to offer a better user experience for newcomers). Huge advantage for those concerned with security here. With a little bit of tweaking, you can also create your own 2FA provider, to avoid being locked in with a specific 2FA app. While other proprietary services like Dropbox offer 2FA as well, Nextcloud allows you to “force” enable or disable 2FA for specific members of the organization. Admins can enable or disable two-factor authentication for users on the command line. Active sessions can be invalidated through the list, by removing the user in the admin settings or by changing passwords. Unsafe or controversial functions are strictly refused, and mandatory code is reviewed by two more reviewers to make sure that everything is bulletproof (or as much as it can get).įurthermore, the Nextcloud authentication system is two factored. On the security side, Nextcloud provides documentation to explain security best practices. Security & custom two-factor authentication (2FA) Having control of your own data is pretty attractive, but how does Nextcloud stack up against the commercial players in other ways, such as features and security? Let’s take a look. Remember Sunrise calendar? Exactly what they did with their calendar app when Microsoft bought them. (That doesn’t happen often, but it does happen.) They can also get bought out. They can mess with your data at any time, if they so choose, as highlighted in Apple’s terms and conditions:Īpple reserves the right at all times to determine whether Content is appropriate … and may pre-screen, move, refuse, modify and/or remove Content at any time, without prior notice and in its sole discretion … Of course, there are the fees, which are fixed, not tailored to everyone’s needs, and could change at any time.īy using them, you’re also entrusting your data to companies that don’t entirely deserve your trust. They’re basically plug-and-play, and are supported and maintained by large companies that have a stake in providing a secure and reliable service. It’s reasonable to ask why we should bother setting up something on our own server when services like Dropbox and Drive are so easy to use.

Google drive sync alternative