A method comprising: protecting by a first computing device content using a data protection public key of a data protection public/private key pair corresponding to an identity of a user of the first computing device, by encrypting the content or a file encryption key that is used to encrypt the content; then copying by the first computing device the protected content to a cloud storage; then obtaining by the first computing device a public key of a public/private key pair of a second computing device (124(i)) from a key store corresponding to the identity of the user in the cloud storage, the first and second computing devices being associated with a same user identity, wherein each computing device stores its device public key in the key store corresponding to the identity of the user, the device public keys of the computing devices are available to other computing devices of the user; then encrypting by the first computing device the data protection private key of the data protection public/private key pair corresponding to the identity of the user of the first computing device using the public key of the second computing device (124(i)) and providing by the first computing device the encrypted data protection private key of the data protection public/private key pair corresponding to the identity of the user of the first computing device to the second computing device, effective to allow the content or the file encryption key that is used to encrypt the content to be accessed from the second computing device while protecting the content or the file encryption key that is used to encrypt the content from being accessed by untrusted devices, the providing comprising storing the encrypted data protection private key of the data protection public/ private key pair corresponding to the identity of the user of the first computing device within the cloud storage; wherein the method further comprises: maintaining within the cloud storage a record of which other devices the data protection private key of the data protection public/private key pair corresponding to the identity of the user of the first computing device has been provided to, and automatically storing on the cloud storage the data protection private key of the data protection public/private key pair corresponding to the identity of the user of the first computing device encrypted using each device public key in the key store for which an encrypted data protection private key of the data protection public/private key pair corresponding to the identity of the user of the first computing device has not been stored on the cloud storage. protecting by a first computing device content using a data protection public key of a data protection public/private key pair corresponding to an identity of a user of the first computing device, by encrypting the content or a file encryption key that is used to encrypt the content; then copying by the first computing device the protected content to a cloud storage; then obtaining by the first computing device a public key of a public/private key pair of a second computing device (124(i)) from a key store corresponding to the identity of the user in the cloud storage, the first and second computing devices being associated with a same user identity, wherein each computing device stores its device public key in the key store corresponding to the identity of the user, the device public keys of the computing devices are available to other computing devices of the user; then encrypting by the first computing device the data protection private key of the data protection public/private key pair corresponding to the identity of the user of the first computing device using the public key of the second computing device (124(i)) and providing by the first computing device the encrypted data protection private key of the data protection public/private key pair corresponding to the identity of the user of the first computing device to the second computing device, effective to allow the content or the file encryption key that is used to encrypt the content to be accessed from the second computing device while protecting the content or the file encryption key that is used to encrypt the content from being accessed by untrusted devices, the providing comprising storing the encrypted data protection private key of the data protection public/ private key pair corresponding to the identity of the user of the first computing device within the cloud storage; wherein the method further comprises: maintaining within the cloud storage a record of which other devices the data protection private key of the data protection public/private key pair corresponding to the identity of the user of the first computing device has been provided to, and automatically storing on the cloud storage the data protection private key of the data protection public/private key pair corresponding to the identity of the user of the first computing device encrypted using each device public key in the key store for which an encrypted data protection private key of the data protection public/private key pair corresponding to the identity of the user of the first computing device has not been stored on the cloud storage.