Hello,
I have bought a used WD personal cloud device from the Facebook marketplace. The device has no label for mac address etc.
Can the seller or someone still access the data that I upload on it?
What specific My Cloud device did you buy? If there isn’t a label on the device one can see the My Cloud support website (https://support-en.wd.com/app/products/product-detail/p/125) for images of what the various units look like. Generally this subforum (My Cloud) discusses the single bay/single drive My Cloud models which look like this:
Because one can access the My Cloud at the firmware level using SSH to make unofficial modifications there will always exist the possibility that changes were made that could potentially bypass the factory reset option called “Full Restore” that is available in the My Cloud Dashboard. The Full Restore option will securely wipe the drive of any user data and reset all Dashboard options back to default. One could, if they are concerned, remove the hard drive and manually wipe them in a computer, then use one of the unbrick procedures (if one has a single bay My Cloud unit) to reinstall the My Cloud operating system back on the hard drive. Do a search for “unbrick” to find many past discussions on unbricking a single bay My Cloud.
One can perform the Full Restore by accessing the My Cloud Dashboard > Settings > Utilities > Full Restore.
How to access the Dashboard on a My Cloud (single bay) device
A Quick Restore and or Full Restore via the Dashboard should remove (erase) all remote access user accounts that were created via the My Cloud Dashboard.
If one is worried about someone accessing their My Cloud from a remote location they can access the My Cloud Dashboard > Settings and turn off the Cloud Access/Remote Access feature.
When you connect it to your local network … go into your router network advanced settings and you’ll find the IP Address assigned to it along with the MAC Address.
Not if you disable “Remote Access” in the My Cloud settings … which just makes it available on you home network (which is all i use it for … remote access is too slow anyways.)
If you want remote access … then use password protection on your folder/data shares
And for people to access your data … you need to send them an email granting them access.
Ultimately, nothing is hacker proof … use whatever protection is available for security
