Configure Security Settings (Windows)
    • Dark
      Light

    Configure Security Settings (Windows)

    • Dark
      Light

    Article summary

    Backblaze encrypts all data during transmission and storage in a Backblaze data center. A general overview of how Backblaze uses encryption to secure your data can be found here.

    You can apply an additional level of encryption to your backup in the Security settings by adding a Private Encryption Key (PEK). It is impossible to view or restore files from the backup of a computer that is secured with a PEK without the key. Additionally, each computer under a single Backblaze account can have a unique PEK.

    Warning
    If a PEK is lost, forgotten, or otherwise unknown, accessing the backed-up data is impossible. Backblaze cannot help you if you forget this password.

    Your private encryption key must conform to the following criteria:

    • It must be between 4-50 ASCII (English) characters in length.
    • It cannot contain any ASCII control characters.
    • It cannot contain an @ symbol, other than a single use of the symbol as part of an email address supplied as a username.

    Set a Private Encryption Key

    1. Open the Backblaze client Control Panel.
    2. Click Settings, and select the Security tab.
    3. Click Enter Your Private Encryption Key.
    4. Enter and confirm your new private key.
    5. Click Set Private Key.
      A success message is displayed.
    6. Click Apply, and click OK.

    Change a Private Encryption Key

    1. Open the Backblaze client Control Panel.
    2. Click Settings, and select the Security tab.
    3. Click Enter Your Private Encryption Key.
    4. Enter your current private key.
    5. Enter and confirm your new private key.
    6. Click Set Private Key.
      A success message is displayed.
    7. Click Apply, and click OK.

    Disable a Private Encryption Key

    1. Open the Backblaze client Control Panel.
    2. Click Settings, and select the Security tab.
    3. Click Enter Your Private Encryption Key.
    4. Enter your current private key.
    5. Leave the Enter New Private Key field and the Re-enter new Private Key field blank.
    6. Click Set Private Key.
      A success message is displayed.
    7. Click Apply, and click OK.

    More detailed information about how Backblaze implements encryption related to the PEK can be found here


    Was this article helpful?