131: Finding Your Way Back In

Encryption Risks

Backup encryption can be a double-edged sword, offering security but also posing risks if not managed carefully. Casey Liss shares a cautionary tale of a corrupted hard drive where the encrypted backup became inaccessible due to the password being stored only in the corrupted partition 1. John Siracusa warns that relying on cloud services like Dropbox can introduce vulnerabilities, as any breach in their security could compromise all stored data 2. He emphasizes the importance of understanding the weakest link in your security chain:

Whatever the weakest link is in the chain, someone just needs to get through to that.

--- John Siracusa

Marco Arment adds that cloud services have unpredictable failure modes, making it crucial to consider potential lockouts or failures 2.

   

Password Management

Effective password management is essential for data security, especially in the event of a total system failure. John Siracusa advises having at least one critical password memorized to ensure access to encrypted backups, even if all devices are compromised 3. Marco Arment shares his strategy of memorizing his Backblaze password, allowing him to recover his data independently of password managers 3. He stresses the importance of having a recovery plan:

If I lost everything locally, all my devices, then I could log into Backblaze with the password I know.

--- Marco Arment

Casey Liss highlights the need for access to email and cloud storage as part of a comprehensive recovery strategy 4.