Secure Cloud Data Backup: A Short Guide
This is a short guide on what to use to securely store your data backups on the Cloud. While there are many tools available to do the job, the question remains: can you trust your sensitive data with just anyone? For me, the answer is always TNO – Trust No One! Here is a list of recommended methods and tools:
- End-to-End Encryption Tools: Use tools that offer end-to-end encryption to ensure that your data is encrypted before it leaves your device and remains encrypted until it reaches its destination.
- Zero-Knowledge Providers: Choose a cloud storage providers that offer zero-knowledge encryption, meaning they cannot access your encryption keys and, therefore, cannot read your data.
- Encrypted Backup Software: Utilize backup software that supports encryption, such as Duplicati, Veracrypt, or Cryptomator, to encrypt your backups before uploading them to the cloud.
- Multi-Factor Authentication (MFA): Enable MFA on your cloud storage accounts to add an extra layer of security and protect against unauthorized access.
- Regular Audits and Updates: Regularly audit your backup processes and ensure that your software and tools are up-to-date with the latest security patches.
List of tools:
- PC or external disks massive backups remotely to the cloud on multiple platforms go for Crash plan (Commercial + encrypted File transmission AES-256-bit File Encryption Blowfish 448-bit ). Or if you are satisfied with AES-256-bit file transmission and storage go for Jungle Disk which gives you the ability to store into your custom S3 Amazon S3 account.
- PC Encryptedee + encrypted) or Spideroak (2 GB free + encrypted) or for Web based solution with 50 GB free storage go for Mega.
- Enterprise secure backups based on open source and synchronized remotely to the cloud on multiple platforms go for Pydio or Dropbox (2 GB free + not encrypted) or UbuntuOne (5 GB free + not encrypted).
- From hard drive or any storage media to another on a local pc go for Mutli Commander (free).
- PC to PC remotely sync folders between machines using P2P Go for Bittorrent Sync (free + encrypted). Or for advance users you can use Syncthing (Open source + encrypted).
- To build Hamachi-style private networks using VPN] go for Freelan (Open source + encrypted).
- To have your own cloud that provides a web interface for accessing files from any computer, including mobile phone go for Owncloud (Open source + encrypted). You can setup this along with Bittorrent Sync and Raspberrypi see this blog on how to do it.
- Another personal cloud system go for Cozycloud (Open source + encrypted).
- For personal private cloud hardware go for Transporter (Commercial + encrypted).
- Instantly turn any server into a file sharing platform go for AjaXplorer (Opensource + encrypted).
- Distributes your data across multiple servers go for Tahoe-lafs (Open source + encrypted).
- Blocked Chain Peer-to-peer distributed technology storage solution go for Storj (Open source + encrypted).
- To secure files on Dropbox or local desktop using a PC go for Veracrypt (Open source), or AxCrypt, or PGP (Commercial) for public key based protection. A free alternative of PGP is GPG4Win or GoAnywhere. For Iphone and IPAD use Opengp.
- To manage your S3 storage account with GUI go for CloudBerry or S3browser or Dragon Disk.
- For AES-256 based encryption with auto sync between folders PC to PC or PC to Cloud (Dropbox or Googledrive) then go for CryptSync (Opensource + encrypted). or BoxCryptor. Or else to encrypt a file locally on your computer and upload it to Dropbox or GoogleDrive go for Instantcryptor.
- If you would like to upload files securely to your own server then go for the Tor-based, secure, encrypted, anonymous dead-drop facility called StrongBox which is based on DeadDrop.
- To wipe your data (secure delete selective files) go for Bcwipe (Commercial). A free alternative of it is Eraser.
- To wipe your data (secure delete entire hard disk) go for Dban (Free). A commercial alternative of it is Blancco wiper.
- For secure and encrypted internet connection go for Stealth Walker.
Extra utilities:
- To compress and archive your data before backup go for 7-Zip.
- To archive your data into .iso or .bin go for Power ISO.
- To check your folders size easily go for Folder Size.
- To search among massive data with fast results go for Agent Ransack.
- Excellent tools for local backup Acronics or Terabyteunlimited or Cloudberry Backup or Drivesnapshot.
Conclusion:
For cloud backup I use the Amazon RRS S3 then move it to S3 Glacier Amazon account along with CloudBerry with client-based encryption because I want more control over a reliable service. Please visit this post to see how I fully back up Linux service to Amazon S3 service.
Latest update I have moved from Amazon services to Google Cloud and I am so happy with it. You can manage it with CloudBerry Backup tool.
You can visit this Wikipedia page for a full comparison of online backup services.
That’s all you need to know on how to store your backups securely. To know more about encryption please read this document.