4 ms·
It's not really something that can be made "consumer friendly" as far as I can tell (But I'd love to be proven wrong!). How do you securely store the key to you
by Intermernet 11y ago
It's not really something that can be made "consumer friendly" as far as I can tell (But I'd love to be proven wrong!). How do you securely store the key to your securely stored data?
Admittedly, there are some recommendations on the Tarsnap site (http://www.tarsnap.com/gettingstarted.html http://www.tarsnap.com/gettingstarted.html):
"5. Keep your key file safe
Store your /root/tarsnap.key somewhere safe.
If you lose tarsnap.key, you will not be able to access your archived data.
The same encryption which ensures your data security also means that there is no way for anybody (including Tarsnap Backup Inc.) to restore your data without this key.
There are many ways to keep it safe:
Copy it to a different system.
Put it on a USB disk.
Give it to a friend.
Print it out (it is printable text).
Store it in a bank vault.
Pick at least one and do it!"
The only other way I can think of to keep the key even safer would be to use Shamir's Secret Sharing to divide the key up and share it among trusted friends and family. (https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing).
- gknoy 11y agoThe above is exactly correct, though: Write it down, put it in a safety deposit box (or two if you're paranoid about losing it?). Note that fireproof safes normally won't protect digital media (temperature) but paper survives well (I hear).