defencia/knowledge/backup
3-2-1 · Cloud · Encryption

Backup

Personal opinions on backup, built on a few basic principles. Start with 3-2-1, then choose a cloud provider — and add your own encryption for sensitive data.

3-2-1Cloud

The 3-2-1 principle

A few basic principles cover most people and SMBs (and large firms too): keep 3 copies of your data, on 2 different media, with 1 copy off-site. Christopher Barnatt's "Explaining Computers" has a good video on it.

Cloud recommendations

ServiceNotes
JottacloudScandinavian (Norway). App backs up files live; versioning allows rollback (useful against ransomware). ~690 DKK/yr unlimited for one user. Holds the keys, so could in theory read your files — mitigate with client-side encryption.
pCloudSwitzerland; creates a virtual drive so you access all files directly. Optional client-side Crypto folder Pcloud cannot read; share links with passwords and expiry dates.
BoxcryptorA service for encrypting files before they reach any cloud — so the provider cannot read them.

On encryption & trust

"Am I safe?" is always debatable. For backup and restore these services are stable and versioned. Whether a provider reads your files is hard to disprove when they hold the keys — so for sensitive data, add your own client-side encryption.

This page reflects personal opinion and is not sponsored.