Encryption: Password-Protected Archives
Secure your backups with Cloudback's AES-256 encryption and password protection, ensuring data confidentiality and tamper-proof archives.
Security and ComplianceEvery backup is stored as a ZIP archive that is automatically encrypted with a unique, system-generated password. This ensures that your backup data remains confidential and tamper-proof.
Encryption Standards
The archive is built using ZIP File Version 5.2 combined with AES-256 encryption-one of the strongest encryption methods available.
Note: Many built-in ZIP utilities (e.g., Microsoft Windows Compressed Folders) do not support AES encryption. For optimal compatibility, we recommend third-party tools such as 7-Zip.
Double-Archive Method
To protect filenames, Cloudback embeds one ZIP archive inside another. Filename encryption is introduced in ZIP File Format Specification 6.2. We use version 5.2 for better compatibility while still protecting your filenames.
Managing Encryption Settings
For customer managed storages, you have the option to disable archive encryption:
Disabling Encryption: Edit your customer managed storage settings and select
ZIP archive without password protection.WARNING: Disabling encryption requires that you implement alternative measures to secure your data.
Enabling Encryption: To ensure maximum security, choose
Password-protected ZIP archive.
Cloudback-managed storages always enforce password protection to maximize data safety.
Archive Sample & Password
You can download a sample archive to test your extraction tools:
- Download: sample-password-protected-archive.zip
- Password:
c8f42392e86e4f7fbe8b4adf7ec65694
Customer-Managed Encryption
By default, Cloudback generates and manages archive passwords automatically. For organizations that need to manage their own encryption keys, Cloudback also supports customer-managed encryption using RSA Lockbox. You provide your own RSA public key, and Cloudback encrypts each backup password with that key. To decrypt backups, you use your private key.
For details on setting up customer-managed encryption, see Encryption Overview.