Ctrlk
HomePricingBlogContactSign In
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Encryption: Password-Protected Archives

Secure your backups with Cloudback's AES-256 encryption and password protection, ensuring data confidentiality and tamper-proof archives.

Every backup is stored as a ZIP archive that is automatically encrypted with a unique, system-generated password. This ensures that your backup data remains confidential and tamper-proof.

Encryption Standards

The archive is built using ZIP File Version 5.2 combined with AES-256 encryption-one of the strongest encryption methods available.

Note: Many built-in ZIP utilities (e.g., Microsoft Windows Compressed Folders) do not support AES encryption. For optimal compatibility, we recommend third-party tools such as 7-Zip.

Double-Archive Method

To protect filenames, Cloudback embeds one ZIP archive inside another. Filename encryption is introduced in ZIP File Format Specification 6.2. We use version 5.2 for better compatibility while still protecting your filenames.

Managing Encryption Settings

For customer managed storages, you have the option to disable archive encryption:

  • Disabling Encryption: Edit your customer managed storage settings and select ZIP archive without password protection.

    WARNING: Disabling encryption requires that you implement alternative measures to secure your data.

  • Enabling Encryption: To ensure maximum security, choose Password-protected ZIP archive.

Setting up archive type

Cloudback-managed storages always enforce password protection to maximize data safety.

Archive Sample & Password

You can download a sample archive to test your extraction tools:

Archive encryption method
Archive password
Archive content

Customer-Managed Encryption

By default, Cloudback generates and manages archive passwords automatically. For organizations that need to manage their own encryption keys, Cloudback also supports customer-managed encryption using RSA Lockbox. You provide your own RSA public key, and Cloudback encrypts each backup password with that key. To decrypt backups, you use your private key.

For details on setting up customer-managed encryption, see Encryption Overview.

Learn More

PreviousImmutability: Amazon S3 Object LockNextTraceability: Audit Log

Last updated

Was this helpful?