Samsung Cloud E2E encryption

[Lulila]

Hello,

More and more users are choosing Samsung because of its high quality and strong security reputation, often migrating from other brands and ecosystems. Recent rumors even suggest that Samsung may introduce fully featured cloud services capable of competing on equal footing with other major providers.

It is widely acknowledged that Samsung has become one of the leading enterprise-focused brands, addressing growing demands for security, compliance, and trust.

However, at this stage, Samsung Cloud does not provide privacy-oriented assurances comparable to those offered by device-controlled solutions such as Knox. There is still no clear guarantee that user or company data stored in the cloud remains private and fully under the user’s control—especially in an era of frequent and large-scale data leaks, where such a layer of protection is more critical than ever.

At a time when privacy has become a key differentiator, both users and enterprises would benefit from stronger control over privacy-related aspects. This would also help Samsung remain on par with—or ahead of—its competitors. Encrypted contacts, messages, and backups are now a baseline industry standard and should become a standard feature of Samsung Cloud as well.

[arianwen27 · Accepted solution]

End to end encrypted samsung cloud is a feature already. It's just opt in. Most things are supported. A few things aren't encrypted but I'd say the important ones are.

It also only works on higher end samsung phones that have good hardware security. Lower end A series devices can't use end to end encrypted cloud due to lacking a secure way to handle it.

[Lulila]

Ohh it’s pretty good to know that core services already can be encrypted. May I know who holds the keys, is it Samsung or a user/company by providing e.g. its own pass phrase?

[arianwen27]

You hold the keys, that's why it's opt in. It provides you a long random security key. You then keep it safe yourself. The backup can only be unlocked by that key.

I believe there is also a system where the key can be your device unlock code, like the way google handles their end to end encrypted backups

[Lulila]

Thank you Arianwen for addressing the question!