Encrypted backups

A friend recently asked, "I want to copy my files for backup but encrypt them so if I happen to lose a CD, DVD, or USB key that contains personal info, I won't have to worry about it. How can I do this?"

I've found it kind of depends on how you’re doing the backup and the media type you’re storing the backup image to.

• If you want to back up just a few hundred folders and files, then Winzip works OK, and the most recent version includes AES encryption. The cost is $30.
• If you’re storing to a USB flash drive, Winzip will also work, or you can use the flash drive supplier’s vault software (if any). I’ve used the EncryptX software for securely storing a few data file and doc backups OK.
• For large partition image backups, the backup software (for example, Dantz Retrospect or Acronis True Image Home) often includes built-in support for password protection or encryption.

I haven’t used free PGP, full-featured commercial PGP, or Gnu PG for encrypting backup images, but I suppose they will work, too. It's probably worth checking out freshmeat.net for open source options, too.

Remember that encryption has the potential to throw a wrench in the works when attempting to access the file later. I’ve had issues with Windows Vista, and it’s possible on other platforms, too. So make sure you have a secure backup of the root encryption key or certificate for this reason. Most encryption software supports exporting the encryption key or certificate in some fashion. If you are using file and folder encryption on Windows, check out Microsoft's Best Practices article for useful tips.