I’m looking into getting an extra backup solution for my laptop, and a backup solution for my NAS/media server. Currently, my laptop backs up to my local NAS, and Proton Drive, while my server has no additional backup.

Is using something like Backblaze B2 actually private and secure, especially if I use the personal encryption key I can set? Or is there another online service that may be better and more private?

  • 𝒍𝒆𝒎𝒂𝒏𝒏@lemmy.dbzer0.com
    35·
    9 months ago

    I would suggest using any cloud storage provider with a third party client, that automatically encrypts your files before uploading them, ensuring the cloud provider does not have any kind of access to your keys.

    I personally use gocryptfs then mirror that to B2, but IIRC rclone and some other third party alternatives have built-in pre-upload encryption options that are easier to setup and use

  • MigratingtoLemmy@lemmy.world
    24·
    9 months ago

    I asked a very similar question earlier and the consensus is to encrypt before you upload. That way you care more about reliability than privacy

    • sugar_in_your_tea
      6·
      9 months ago

      And make sure your encryption keys are stored securely. You don’t want a house fire or something to destroy your keys and your data.

      • Molecular0079@lemmy.worldEnglish
        1·
        9 months ago

        What are good places to store your encryption keys? I am trying to find solutions that aren’t just store a piece of paper in some security deposit box.

        • sugar_in_your_tea
          11·
          9 months ago

          Some options:

          • encrypted file stored on a free tier data storage (many are free for the first year)
          • Tarsnap - dedups so storage is cheap; for keys, this would be pennies per month
          • Molecular0079@lemmy.worldEnglish
            1·
            9 months ago

            encrypted file stored on a free tier data storage (many are free for the first year)

            I am confused, aren’t you just pushing the problem further up the chain? Now you need to worry about storing the key that decrypts the file storing the key you wanted to protect in the first place.

            Same goes with tarsnap, now you need to worry about where to store the tarsnap keys.

            • sugar_in_your_tea
              1·
              9 months ago

              You’d use a password to encrypt the keys and/or store that key in your password manager.

        • Atemu@lemmy.ml
          1·
          9 months ago

          Flash loses memory over many years. I’d use like 3 different mediums and always keep a hash of the key with the key.

        • sugar_in_your_tea
          1·
          9 months ago

          As long as they’re physically separated so you don’t get screwed if there’s a fire or something. And if you’re DIY-ing, use multiple separate places (friends houses, work, etc).

  • million@lemmy.worldEnglish
    22·
    9 months ago

    I am using B2 now - I started using it before they added the encrypted buckets and am using restic to encrypt everything. It’s nice because I don’t really have to trust Blackblaze at this point aside from them not losing my data.

    I’ve since additionally turned on encryption on my buckets, but as far as I know they store the key for you, so in terms of privacy it’s not the best.

    • BlueBockser@programming.dev
      2·
      9 months ago

      +1 for restic. I’ve been using it for four years now and have never encountered an issue, including during my yearly restore practice run.

      As far as B2 bucket encryption is concerned, I wouldn’t trust it as far as I can throw it. Quite honestly, it could just be a fancy checkbox on their website without any actual encryption, and we wouldn’t be able to tell. Either way, a compromise of Backblaze would put your data at risk.

  • sugar_in_your_tea
    22·
    9 months ago

    I figure I’ll ask here instead of making a new post:

    Does anyone know of any storage services that accept anonymous payment (cash, Monero, etc) and don’t associate with an account? I’m willing to pay a premium since it would only be for a relatively small amount of data (mostly keys and whatnot). Bulk, uninteresting data would be encrypted and stored on a less expensive host like Backblaze or whatever.