I’m looking into getting an extra backup solution for my laptop, and a backup solution for my NAS/media server. Currently, my laptop backs up to my local NAS, and Proton Drive, while my server has no additional backup.
Is using something like Backblaze B2 actually private and secure, especially if I use the personal encryption key I can set? Or is there another online service that may be better and more private?
- 𝒍𝒆𝒎𝒂𝒏𝒏 ( @lemann@lemmy.dbzer0.com ) 21•6 months ago
I would suggest using any cloud storage provider with a third party client, that automatically encrypts your files before uploading them, ensuring the cloud provider does not have any kind of access to your keys.
I personally use gocryptfs then mirror that to B2, but IIRC rclone and some other third party alternatives have built-in pre-upload encryption options that are easier to setup and use
- delirious_owl ( @delirious_owl@discuss.online ) 21•6 months ago
Always encrypt client-sidr before upload
- donkeystomple ( @adonkeystomple@lemmy.ml ) English2•6 months ago
Would cryptomator work for that?
- Atemu ( @Atemu@lemmy.ml ) 2•6 months ago
Cryptomator is made for that exact purpose.
- Gargari ( @Gargari@lemmy.ml ) English10•6 months ago
Use rclone crypt with any provider
- calmluck9349 ( @calmluck9349@infosec.pub ) 1•6 months ago
This is what I am doing to offsite backup my files. B2 has great pricing!
- ShadowCat ( @ShadowCat@lemmy.dbzer0.com ) English1•6 months ago
does encryption/decryption take time ?
- Gargari ( @Gargari@lemmy.ml ) English1•6 months ago
It’s happening in background, you only see plain files and encrypted ones getting uploaded. It’s seamless
- The Doctor ( @drwho@beehaw.org ) English4•6 months ago
If you encrypt your data before uploading it to B2 you should be fine. Unless you run it yourself on your own server, you can’t be sure that your data will be unreadable by anyone poking around unless it’s encrypted.
I’ve been using B2 for my offsite backups for a couple of years now (since 2018), and both Duplicity and Restic encrypt data before shipping it over. I wrote about it here.