IIRC, with Crashplan (RIP) you get a choice of whether to encrypt everything with a local key, in which case you're SOL if you lose it, or to encrypt with a key

IIRC, with Crashplan (RIP) you get a choice of whether to encrypt everything with a local key, in which case you're SOL if you lose it, or to encrypt with a key known to Crashplan, in which case you can reset your password and they can see your data. That seems like a reasonable trade-off to me, where different users will make different choices.