Advice Request How do you encrypt your data before cloud backup ?

[codswollip]

You might want to consider either Duplicati 2.x...

IMO Duplicati isn't ready for mission-critical storage. I've also had issues restoring backups from an alternate host machine. If the PC I used to run Duplicati fails, my cloud backups don't restore using Duplicati from an alternate machine. Maybe your luck is better.

Duplicacy seems more stable.

 

[ForgottenSeer 85179]

For windows it exist GPG4Win which is a GPG/ PGP port for Windows and it's maintained.

Beside encryption questions: with that tool, you can use hardware token like Nitrokey and if the private key is generated on that (and not shared with PC), no one can decrypt your data!
Same is also possible with VeraCrypt which can use SmartCards like Nitrokey as keyfile.

Hardware token are maximum for security

 

[DDE_Server]

For windows it exist GPG4Win which is a GPG/ PGP port for Windows and it's maintained.

Beside encryption questions: with that tool, you can use hardware token like Nitrokey and if the private key is generated on that (and not shared with PC), no one can decrypt your data!
Same is also possible with VeraCrypt which can use SmartCards like Nitrokey as keyfile.

Hardware token are maximum for security

Good to know about hardware token. i will check it but could i turn external HDD to have same feature "HDD space is huge compared to usb stick ??

 

[ForgottenSeer 85179]

Good to know about hardware token. i will check it but could i turn external HDD to have same feature "HDD space is huge compared to usb stick ??

You can't use a normal device as hardware token. This is same for HDD/ SSD and USB Sticks.

 

[DDE_Server]

You can't use a normal device as hardware token. This is same for HDD/ SSD and USB Sticks.

Then it is just be suitable for very sensitive data with small size.but for routinely backed up data it will not suitable or handy for this task or storing encryption keys as stated on their website

 

[ForgottenSeer 85179]

Then it is just be suitable for very sensitive data with small size.but for routinely backed up data it will not suitable or handy for this task

Nah you don't understand. A hardware token isn't usable for files. It's a not writable device which only provide the Smartcard Feature while protect itself against manipulation.
You can see it as (hardware) two factor.

As I say both VeraCrypt and GPG support such SmartCards for encryption. So without that, a attacker can't do anything.

 

[DDE_Server]

Nah you don't understand. A hardware token isn't usable for files. It's a not writable device which only provide the Smartcard Feature while protect itself against manipulation.
You can see it as (hardware) two factor.

As I say both VeraCrypt and GPG support such SmartCards for encryption. So without that, a attacker can't do anything.

ok thanks again i will read more about this type of hardware

 

[Tiamati]

Hey guys, i was reading the full thread and found a lot of good information.

I was wondering if you can you help me with one matter (as it seems you know a lot about cloud backup)?

How can i backup a full system image directly to Google Drive? I have an account with a lot of space, but my local HD doesn't have enough space to handle a full system backup regularly in a way that i could maintain the offline and online backups. I have enough space only in the cloud. So i would need to create and increment it directly through the cloud...

I'm currently using AOMEI backupper and i use the option to add encryption when i create a backup, so it shouldnt be a problem.

ty

 

[Tiamati]

I use Cryptomator.

I used Steganos Safe in the past. It encrypted files using 384-bit AES-XEX encryption ... Any idea if its safe?

 

[DDE_Server]

Hey guys, i was reading the full thread and found a lot of good information.

I was wondering if you can you help me with one matter (as it seems you know a lot about cloud backup)?

How can i backup a full system image directly to Google Drive? I have an account with a lot of space, but my local HD doesn't have enough space to handle a full system backup regularly in a way that i could maintain the offline and online backups. I have enough space only in the cloud. So i would need to create and increment it directly through the cloud...

I'm currently using AOMEI backupper and i use the option to add encryption when i create a backup, so it shouldnt be a problem.

ty

Using Aomei backupper make the default path for backup in the cloud but I think you should have some space in the hard drive to synchronize your cloud in the hard drive then copy the back ups to it this the only way I know
I have folder in my hard drive called Google drive which is synchronized with my cloud so if I make Aomei backupper makes it backup in it it should be automatically uploaded on the cloud

 

[scorpionv]

Nice thread. I use PCloud Crypto, where the PCloud client takes care of client-side encryption. Serves me well, but I'd like to check out tools like Cryptomator in combination with the regular PCloud as well.

 

[ForgottenSeer 85179]

I used Steganos Safe in the past. It encrypted files using 384-bit AES-XEX encryption ... Any idea if its safe?

Wouldn't use that for important files

 

[Divine_Barakah]

I used Steganos Safe in the past. It encrypted files using 384-bit AES-XEX encryption ... Any idea if its safe?

Honestly, I have never used it before and I am not qualified to say if its safe or not. You can use 7-Zip to encrypt your files or use Cryptomator (which is more convenient).

 

[ForgottenSeer 78429]

Honestly, I have never used it before and I am not qualified to say if its safe or not. You can use 7-Zip to encrypt your files or use Cryptomator (which is more convenient).

I am using cryptomator for client side encryption for important files before I upload them on SYNC cloud which also uses its own client side encryption.

 

[Divine_Barakah]

I am using cryptomator for client side encryption for important files before I upload them on SYNC cloud which also uses its own client side encryption.

Wow! I would not use Sync if you are using cryptomator. I would go for a cheaper option such as OneDrive. But have two encryptions? This is two much.

 

[ForgottenSeer 78429]

Wow! I would not use Sync if you are using cryptomator. I would go for a cheaper option such as OneDrive. But have two encryptions? This is two much.

I am using their free plan, 10 GB is enough for me. Double encryption is for important documents only like backup codes of 2FA and backup file of andOTP. I store them in cloud because if something goes wrong with my devices I am not locked out of my accounts. Also they are in Vault folder of SYNC.