Encrypted Messaging Compared: What Metadata Still Leaks
Encryption hides what you say, not who you talk to. A practical look at the metadata Signal, WhatsApp,...
Your phone's camera roll, the scanned documents, the photos from your nan's birthday: most of it sits on computers you will never see, in buildings you cannot visit, under terms you did not write. Self-hosting is the plain alternative. A small machine in a cupboard, running software you control, holding files that belong to you. It is cheaper than people expect and less complicated than it sounds — provided you get three things right: hardware, access and backups.
Self-hosting is running a service on your own hardware rather than renting it. Instead of paying a subscription for cloud storage, you run something like Nextcloud on a box at home and reach it through your own wi-fi. Immich does the same job for photos and can back up your phone overnight. Syncthing keeps folders in step between two devices with no server in the middle at all.
What it is not: a magic privacy switch. The moment you self-host, you are the system administrator. Security patches, failed disks and forgotten passwords are your problem now. Nor is it always cheaper than a few pounds a month for cloud storage — the value is control, and the fact that nobody can change the terms on you halfway through a contract.
If you would not maintain it, do not host it.
You do not need a rack. Any of these will handle a household's files, photos and a media library:
For storage, use an SSD for the operating system and current files, and a spinning disk for bulk archives. If a drive is 3.5-inch, put it in a powered enclosure: bus-powered drives that draw current from a USB port cause a lot of avoidable data loss. Two mirrored drives is nice. It is not a backup.
Keep it boring. One operating system, one service at a time, everything written down.
The obvious move is to open a port on your router and point it at the server. Please don't, at least not yet. Exposed services are found by scanners within hours.
A mesh VPN such as Tailscale, or plain WireGuard, is the simplest answer. Install it on the server and on your phone and laptop, and they join a private network. Your files are reachable from a hotel in Cornwall or a train, nothing is published to the open internet, and your router stays shut.
It also solves a very British problem. Some broadband providers — mobile and full-fibre networks especially — put households behind carrier-grade NAT, which means port forwarding simply will not work. A tunnel sidesteps it entirely. Cloudflare Tunnel is another option if you need a public address, but a private VPN is enough for family files.
The maths is easy. Watts multiplied by hours, divided by 1,000, gives kilowatt-hours. Multiply that by your unit rate from your bill.
A mini PC drawing 12W around the clock: 12 × 24 ÷ 1,000 = 0.29 kWh a day, roughly 105 kWh a year. At an example rate of 25p per kWh, that is about £26 annually. A Raspberry Pi at 5W comes to around £11. A retired desktop tower at 70W would be nearer £150.
Check your own unit rate rather than trusting any figure you read; rates vary by region, tariff and season, and standing charges are separate. Add a few watts per spinning disk, and a little more when the machine is busy. If the number bothers you, spin disks down when idle or schedule heavy jobs overnight — but do not put the server to sleep if it is meant to catch your phone's photo backups at 3am.
A mirrored pair of drives keeps you running when one fails. It does nothing about fire, theft, ransomware or the command you typed at 11pm. Follow the old 3-2-1 rule: three copies, on two kinds of media, one of them somewhere else.
Then test it. Twice a year, restore a folder from each copy onto a spare machine and open a file. An untested backup is a hope, not
Photo: Peggy_Marco / Pixabay
Encryption hides what you say, not who you talk to. A practical look at the metadata Signal, WhatsApp,...
A practical January routine for finding the old accounts you've forgotten, exporting the data worth...
A practical UK guide to spotting fake delivery texts, clone shops and dodgy payment requests this...