Originally Posted by
Troy Tiscareno The idea is to have an OFFLINE, unencrypted copy of your data. External hard drive, USB thumb drive, etc. And you want that data to be in an open format, that can be read/accessed by you and/or imported into other apps without data loss. Again, encrypted data is very easily lost, so unless you are talking about extremely sensitive information, you probably don't need the offline backups of your backyard BBQ pics or your resume to be encrypted.
That's a matter of opinion. I don't keep any unencrypted data at rest anywhere. Neither does my business. It's frankly easier to simply encrypt everything all the time than it is to manage a mix of encrypted and unencrypted data. We use full disk encryption on everything, just like I do on my phone. We would literally have to install a separate hard drive to save unencrypted files!
You're correct that users who don't properly validate encrypted backups or who don't protect their encryption keys risk losing access to their data. But it really isn't difficult to put procedures in place that make that virtually impossible.
For example, at work we have two soft and two hard copy backups of all our encryption keys. Our two co-founders each have a sealed envelope with each other's keys, and our lawyers have two identical encrypted flash drives with all our company keys and instructions for use, one stored in their offices and one stored offsite.
For my personal data, in addition to daily and weekly automated encrypted cloud backups, once a month I make a full encrypted backup of my personal data which I give to a friend to keep at his house. The keys are also distributed, though the friend with the data does not have them or know how to get them.
Posted via CB10