in Others

How to configure Encryption in CloudBacko backup software

How to configure encryption in CloudBacko backup software

When backing up data to a non-local destination, e.g. public cloud, CloudBacko lets you encrypt your backup data before sending to the destination so that no hacker will know what you have backed up, even if they can get break into your cloud storage and take your data.

If encryption is enabled, before files are uploaded to the backup destination, they are first compressed and encrypted with an algorithm, mode and key of your choice.

Encryption settings are defined when a backup set is created. Even if the login password is changed after the encryption is done, the encryption key remains unchanged and cannot be modified. The only alternative is to create a new backup set using the new encryption key and back up your data from scratch.

Once you have enabled the encryption recovery option in Profile > Encryption Recovery. The encryption key file will be uploaded to the Backup Server. In case you forgot the encryption key, you can still contact us to recover it. The recovered encryption key will be sent to you by email directly. Make sure you have filled in your contact details under the Profile > Contacts section so that the encryption key can be sent to you.


For CloudBacko Pro and Lite users, it is very important to export current configuration settings using our tools in Utilities > Export/Import Settings, the file settings.sys will be exported. Please keep the settings.sys in a safe places.

If your current backup computer is crashed and the settings.sys file is lost, you will not be able to restore the current settings including the encryption key, and the data that you backup is irretrievable.

For CloudBacko Free users, your hashed encryption key will be kept on our server. You don’t have to worry on exporting your configuration.


Field Description
Encryption Type
There are 2 encryption types, namely Default and Custom
There are 3 encryption types, namely Default, User password and Custom
    • Select “Default”, CloudBacko will base on the followings to assign the encryption key and encryption settings.
      • - Encryption Key: A randomly generated key of 44 alpha numeric characters
      • - Encryption Key length: 256 bits
      • - Encryption Algorithm: AES
      • - Encryption Method: CBC
  • Select “Custom”, you can custom the encryption key, backup algorithm, method and key length.
Algorithm There are 3 backup algorithms:

  • Twofish: Twofish algorithm
  • DESede: Triple DES algorithm
  • AES: Advanced Encryption Standard algorithm
Method There are 2 backup methods:

  • ECB: Electronic Cook Book mode
  • CBC: Cipher Block Chaining mode
Key length There are 2 key length options

  • 128-bit
  • 256-bit
Encryption key If Custom Encryption Type is used, consider the following to create a strong encryption key:

  • Length: Make sure the encryption key is at least eight or more characters.
  • Complexity: Include lowercase, uppercase letters and numbers.

Avoid creating encryption key that uses:

  • Dictionary words.
  • Words spelled backwards, common misspellings and abbreviations.
  • Sequence or repeated characters.
  • Personal information, your name, your birthday, or similar information. Include lowercase, uppercase letters and numbers.
Re-type encryption key Enter the same encryption key again to ensure the encryption was typed correctly.

To setup encryption for a backup set:

  1. Slide the switch to right hand side to turn on the encryption.
  2. Enter “Default” or “Custom” from the Encryption type drop down box.
  3. If you choose “Default”, click [Next] button to continue.
  4. If you choose “Custom”:
    • Select the algorithm of the encryption.
    • Enter the encryption key.
    • Re-enter the encryption key to confirm.
    • Select the method of the encryption.
    • Select the key length of the encryption.
  5. Click [Next] button to continue. You will then see a pop-up window where you can copy the encryption key to another location of your choice.