Google Drive

Google Drive is Google’s file storage service. It comes with every Google account, and its storage is shared with Gmail and Google Photos. It is reviewed here on the same five criteria as every other service in this section, as a point of reference rather than a recommendation.

The review turns on one fact: Google holds the keys. Files are encrypted on the way to Google and on its disks, but Google’s own systems decrypt them whenever they need to, so Google can read your files, analyze them, and hand them over when a court or government agency requires it. A personal account has no setting that changes this.

What Drive offers in return is everyday convenience: real-time editing in Google Docs, Sheets and Slides, apps for every major platform except Linux, 2 TB for $99.99 a year in the US, and a lost password that does not cost you your files.

Encryption & Key Custody

Google says every file uploaded to Drive, and every document created in Docs, Sheets and Slides, is encrypted in transit and at rest with AES-256. That is encryption at rest: it protects your files if someone steals a disk or a backup tape from a Google data center. It does not keep them from Google. Google’s 2021 encryption whitepaper, which says it covers consumer as well as business data, describes keys held in a Google-wide key management service and states that each piece of stored data “can only be decrypted by authorized Google services and employees”. That is key custody with the provider.

The 2021 whitepaper lists what Drive encrypts on disk besides file contents: file and folder titles, descriptions, creators and owners, search indexes and activity logs. All of it is under Google’s keys, so there is no metadata encryption in the sense that matters here. Google sees your file names, sizes, folder structure, who you share with and when you open what.

Google does sell end-to-end protection, under the name Client-side encryption, but not to individuals. It works only in the Frontline Plus, Enterprise Plus, Education Standard and Education Plus editions of Google Workspace, an administrator has to switch it on, and the person creating encrypted files has to sign in with a work or school account. For those files Google says it “cannot decrypt” them. A personal Google account, with or without a Google One plan, cannot use it.

Sharing works the same way as storage. A file shared with named people or through an “Anyone with the link” link is served from Google’s servers, and Google can read it like any other file in your Drive. Because decryption happens on Google’s side, it makes no difference whether you use the web interface, the desktop app or a mobile app.

The one advantage of this model is account recovery. A forgotten password does not lock your files away: Google’s recovery process asks questions to confirm the account is yours and then lets you set a new password.

Trust & Transparency

The Drive apps and the service behind them are closed source, and Google publishes no security audit of Drive’s encryption. Google Workspace services, Drive among them, are covered by an ISO/IEC 27001 certificate that Google obtained after an audit by a certification body; the scope applies to business customers, and the certificate is available on request rather than published. Google’s 2021 encryption whitepaper says access to its keys is audited every year by an independent third party, without naming the firm or publishing a report. Both checks are arranged by Google and say nothing about who can read a personal account’s files.

Google’s privacy policy says it collects “docs and spreadsheets you create” and other content you upload, and that “automated systems” analyze your content to provide features and to detect “spam, malware, and illegal content”. The same policy says Google does not show personalized ads based on Drive content. The Drive terms add that Google “may review content to determine whether it is illegal or violates our Program Policies” and may remove it; under those policies, a violation can also limit or end your access to Google products.

On AI, Google’s help page says that when Gemini works with your Workspace content, Drive files included, it uses that content to answer your prompts and does not use it to train Gemini or other generative AI models. Workspace content is not used to train models outside Workspace “without permission”. The exception: data you share with the Gemini app for Personal Intelligence, or through screen actions such as screenshots, follows the Gemini app’s own terms and “may be used for model training and improvement”. A separate setting, smart features in Google Workspace, controls whether Drive uses your files and activity for personalized search and file suggestions.

Google’s terms name Google LLC of Mountain View, California, and are governed by California law unless your local law requires otherwise; in the EU, consumer services are provided by affiliates that include Google Ireland Limited. Google LLC is a wholly owned subsidiary of Alphabet Inc. Google says it reviews each government request and tries to narrow those that ask for too much, and its transparency report covers all Google products together. In July to December 2025 Google received 304,915 requests covering 748,475 accounts and disclosed some information in 84% of them. US national security requests are reported separately and only in ranges: in the same period, requests under the Foreign Intelligence Surveillance Act (FISA) for account content affected between 211,000 and 211,499 accounts, and Google states that such a request can demand “documents, photos, and videos”.

Beyond the files themselves, Google holds your name, your phone number and payment details if you added them, and the IP addresses and devices you connect from. The privacy policy describes collecting IP addresses, crash reports and “system activity” whenever a Google service contacts its servers. Activity controls such as Web & App Activity decide what is saved to your account, not whether this information is collected, so the telemetry is always on. There is no known data breach of Drive files.

Features & Sync

Google Drive for desktop runs on Windows and macOS. It can stream files, which keeps them in the cloud and uses almost no disk space, or mirror them, which keeps a full copy on your computer, and chosen files and folders work offline. There is no Linux app for desktop sync.

Drive keeps earlier versions of non-Google files only for a short time. For file versioning, Google says an earlier version may be deleted after 30 days or once there are 100 newer versions, unless you mark it Keep forever. Google Docs, Sheets and Slides keep a separate version history of their own. Deleted files stay in the Trash for 30 days and count toward your storage until then.

A single file can be up to 5 TB; a Google Docs document holds up to 1.02 million characters and a spreadsheet up to 20 million cells.

Collaborative editing is what Drive is built around. Docs, Sheets and Slides let several people edit the same file at the same time. The editing happens on Google’s servers, so Google can read these documents.

In November 2023 versions 84.0.0.0 to 84.0.4.0 of Drive for desktop lost files that had not yet been synced, for what Google called a small subset of users. Google released a recovery tool in version 85.0.13.0 and said it did not expect the tool to work for everyone.

Usability & Platforms

Drive has apps for Windows, macOS, Android, iPhone and iPad, plus the web interface. The Android app lists more than 10 billion downloads and a 4.3 rating from 10.8 million reviews on Google Play; the iOS app holds 4.8 from 7.9 million ratings on the App Store. Sharing takes a name or a link, though expiry dates for shared access are available only on eligible work and school accounts.

The Google account that holds your files supports two-factor authentication with Google prompts, passkeys and hardware security keys. A forgotten password goes through Google’s account recovery, described above.

Price & Value

The free tier is “up to 15 GB” per Google account, shared across Gmail, Drive and Google Photos. In May 2026 PCWorld reported that some new accounts created without a phone number received 5 GB instead, with 15 GB restored once a number was added; Google called it a test of “a new storage policy for new accounts created in select regions”. Existing accounts were not affected.

Paid storage is sold as Google One plans, priced by country. In the US, Basic with 100 GB costs $19.99 a year or $1.99 a month, Google AI Plus with 2 TB costs $99.99 a year or $9.99 a month, and Google AI Pro with 5 TB costs $199.99 a year or $19.99 a month. Google AI Plus includes Gemini in Gmail, and Google AI Pro includes Gemini in Gmail, Docs, Vids and more. Every paid plan can share its storage with up to five other people. Google gives at least 30 days’ notice of a price increase.

Google’s refund policy says storage plan purchases are non-refundable in most countries; a cancelled plan keeps its storage until the end of the billing period. If you stay over your storage quota for two years or longer, Google may delete all of your content.

Pros and Cons

Our Rating