I have a set of text data, that are of high importance and I want to encrypt them. Be it to keep it on a cloud for redundancy, or for an extra layer of security in my local machines.
I understand AES256 is maybe the way to go.
My plan is to do the following and I would like to see your views and potential alternatives.
- Encrypt the data with a highly robust algorithm (AES?) and a very long password with high entropy, like 50+ characters.
- Store it in a cloud storage service (but not Google Drive or LastPass or similar) which has acquired a serious set of certifications and compliances (eg AWS, Azure). If a hospital or the army is storing their records there, it should be good for me I believe (??)
- Use encryption at rest in the aforementioned service and all best practices available (eg not accessible outside of your account, 2FA etc).