Security Questions to Ask Before Storing Family Videos Online

Before you upload deeply personal family recordings to any platform, you deserve straight answers to seven fundamental security questions — about how your files are encrypted, who can access the decryption keys, what happens to your data when delivery links expire, and what the plan is if the service ever shuts down. No platform can offer perfect guarantees, but the right answers to these questions will tell you whether a service deserves your trust.

Why Security Matters for Personal Videos

A final message to your children. A wedding anniversary tribute. A recording you made when you were first diagnosed with a serious illness. Family videos sit in a category of their own — they are among the most private things you own, more intimate in many ways than financial documents or medical records.

Unlike a bank statement, a personal video cannot be reissued if it is compromised. The harm is not just practical; it is emotional and irreversible. Footage of a deceased loved one appearing in a data breach, being indexed by a search engine, or simply being accessible to people it was never intended for is a profound violation.

This is why the security posture of a digital legacy platform is not a secondary concern. It is the primary one. The questions below are designed to help you evaluate any service — including ours — before you trust it with content that cannot be replaced.

The 7 Security Questions to Ask Any Platform

Ask these questions directly, or look for clear answers in a platform’s security documentation. Vague answers are themselves informative.

• Question 1

  How are videos encrypted?
  Look for AES-256 encryption at rest combined with TLS in transit as a minimum baseline. Ideally, a platform uses client-side or end-to-end encryption, meaning the video is encrypted on your device before it ever reaches the server and the service provider never holds the plaintext. If a provider only says “we use HTTPS,” that covers transit but tells you nothing about how data is stored on their servers.

• Question 2

  Who can access the encryption keys?
  This is the question most services would prefer you not ask. When a provider manages the encryption keys (server-side key management), staff with the right permissions can — in principle — decrypt your content. The alternative is user-controlled key management or envelope encryption where keys are derived from a passphrase only you hold. Ask explicitly: does your engineering or support team have a technical path to decrypting a specific user’s stored video?

• Question 3

  Are delivery links time-limited?
  When a video is delivered to a recipient, how is it shared? A raw, permanent URL is a significant risk — it can be forwarded, indexed, or accessed years after delivery. Strong platforms issue signed, time-limited URLs that expire after a defined window (e.g., 24–72 hours) and require re-authentication to regenerate. Ask how long delivery links remain valid and whether they can be revoked.

• Question 4

  What happens to my data if the service shuts down?
  Digital businesses close. Ask what the platform’s wind-down policy is: will you receive advance notice? Will you be able to export your original files? Will data be securely deleted rather than sold or handed to another company? The absence of a documented answer here is a serious warning sign — especially for a service holding content intended for posthumous delivery.

• Question 5

  Is there an audit trail of who accessed what?
  Reputable platforms maintain access logs that record which accounts or system processes accessed which files, and when. This does not prevent inappropriate access, but it creates accountability and enables detection. Ask whether access logs exist, who can read them, and for how long they are retained. A service that keeps no logs cannot tell you if your data was accessed without authorisation.

• Question 6

  How are account credentials protected?
  Your account is the front door. Ask whether the platform supports two-factor authentication (2FA), how passwords are stored (look for bcrypt, scrypt, or Argon2 — never plaintext or simple MD5/SHA1), and whether there are protections against brute-force login attempts. Also ask: if a recipient has never used the platform, how are they authenticated in a way that prevents an attacker from intercepting delivery?

• Question 7

  What is the data retention and deletion policy?
  Understand both sides: how long does the platform retain your data by default, and — critically — what happens when you request deletion? Data should be purged from all backups within a defined window, not merely hidden from your dashboard. Ask how long deletion propagates through storage and backup infrastructure. Deletion that takes effect in six months is not the same as one that takes effect immediately.

How MyFinalMessage Answers These Questions

We believe you should be able to apply the questions above to us just as you would to any other service. Here are honest answers — including where we have limits.

Red Flags to Watch For in Any Service

When evaluating any platform for storing personal family content, treat these as prompts to dig deeper — or walk away:

• ❌ Vague or absent security documentation. If a service does not publish a clear explanation of how it stores and protects data, that absence is itself an answer.
• ❌ Claims of “100% guaranteed delivery” or “impossible for anyone to access.” No honest system can make these claims. They signal either a misunderstanding of the technology or a willingness to overpromise.
• ❌ No mention of encryption standard. “We take security seriously” is a marketing phrase, not a security posture. Any credible service should be able to name the encryption algorithm and mode it uses.
• ❌ Permanent, shareable delivery links. If a recipient can forward a link to your private video indefinitely without it expiring, that video is no longer under your control the moment it is delivered.
• ❌ No documented wind-down or data portability policy. A service storing content intended for delivery years in the future should have a plan for what happens if it does not survive that long.
• ❌ No two-factor authentication option. If a single compromised password is all it takes to access years of personal recordings, that is an unacceptable risk surface.
• ❌ Instant, irreversible deletion with no audit trail. A service that deletes instantly and keeps no logs cannot demonstrate it complied with a deletion request, and cannot identify if data was accessed before deletion was requested.

Frequently Asked Questions