> If you are providing them with just a key, you are still trusting them to do the encryption right. Better to encrypt it yourself, in my opinion. I am encrypt

> If you are providing them with just a key, you are still trusting them to do the encryption right. Better to encrypt it yourself, in my opinion. I am encrypting it myself, in addition to the backup being encrypted. > Also, even if you encrypt it yourself but upload it somewhere, it's possible that the encryption will be cracked at some point in the future (with sufficient advance of technology). So the safest way (in terms of privacy) is not to send backups offsite at all, or at least to make sure they're physically secure from anyone else getting their hands on them. Yes, those things are true. However - this system is a blend of convenience, security, and disaster recovery that works for me. Nothing is foolproof, but this lets me sleep at night, and IMHO provides more than reasonable security.