Encryption before upload
Cloud backups are encrypted on the device before upload to the selected iCloud or Google Drive account. The version 2 backup format uses XSalsa20 Poly1305 and PBKDF2 HMAC SHA512 with 10,000 iterations.
Separate passwords
The backup password protects the backup file. The wallet passcode protects access on the device. Aura cannot reset the backup password. Keep a secure offline phrase copy as another recovery option.
Cloud access
Restore requires access to the account holding the file and the correct backup password. Protect the cloud account with two step verification. Assets stay on the blockchain; a backup restores the keys that access them.
Source reviewed . Live release verification remains separate.