Encrypt your cloud backup end-to-end. Only your PIN or recovery code can open it — not even the server.