4 ms·
You do then need to find somewhere to store an offsite backup of your encryption keys. That said, since those change far less often than your backups, options l
by pavon 6y ago
You do then need to find somewhere to store an offsite backup of your encryption keys. That said, since those change far less often than your backups, options like a safety deposit box are a more realistic place to store keys than the backups themselves.
- Macha 6y agoYes, borg also has the option of storing them in the repo itself, protected by a passphrase (think encrypted ssh key files). Anyway, my "home burned down rescue bundle" consists of a flash drive with a keepass export of my password vault and encrypted borg repo key / rsync.net ssh keys at the office. Slightly less accessible in this pandemic world, but no safety deposit boxes needed.
- rsync 6y agoImportant to reiterate this, since it's an interesting feature - borg does, indeed, allow you to store the encryption key for your repository inside the repo itself and you just need to remember/safeguard the passphrase. I can't say whether this is a good choice for any particular use-case but I appreciate that it is an option ... For those that are curious, yes, you can later export the key from your repo so that you have a copy elsewhere ...