I'm very interested in using an online backup service to keep my data safe from malfunctioning hardware. And I am, of course, willing to pay for the service.
However, I don't want my data to be accessible by anyone other than me - and that's including the backup service itself. The online backup services I've seen do seem to use strong cryptography for the connection to their server, and keep the data secure and encrypted on their storage space too. But I what I haven't seen advertised is giving the user an option of encrypting the data with the user's own passphrase, at the client side, so that the service provider cannot have access to the data. Well, without a quantum computer, that is.
I know I could keep my data encrypted by using an encryption software like TrueCrypt, and then back up the encrypted data storage - but I really don't want the hassle of keeping all the data on my home computer constantly encrypted. I also expect there would be some hassle from the backup process. And the whole reason for using an online backup is not having to deal with all the hassle.
Are there online backup services that:
- Encrypt all data with my passphrase before it gets sent to the server
- Use strong cryptography for the encryption
- Do not store or transfer my passphrase anywhere (or keep it stored strictly client-side)
I do realize if I lose my passphrase, the backup becomes useless. This is not a problem, since I'm not going to forget my passphrase. Or if I do, tough luck for me. :)
I also realize that since I'd be most likely using a proprietary software, all it takes from the software provider is an update that makes the software send my passphrase to them. The only true way to ensure privacy would be to use a known open-source software. However, I'm not worried about this risk. (By that thinking, my data is already compromized by any proprietary software I run, regardless of whether it's backup related software or not.)
The software would be mainly for Windows use, but linux support is a nice addition.
Since there are some inane restrictions for cryptographic algorithms in some parts of the world, I'll also mention that I need the service in Europe.
Similar, but not identical, topics: