Windows 7 Is Backing Up Online Safe?

[whoosh]

Link Removed

After reading Link Removed, LaTonya Powell asked whether online backup services such as Mozy (which I recommended in that tip) are really secure.

That's a good question. Identity theft is a serious problem, and we should all be concerned about it.
I should add that I'm a Mozy user myself, and yes, I pay for it just like everyone else.
According to my Mozy contact, that service encrypts the files on your PC before uploading them (over a secure, SSL connection). The files remain encrypted on Mozy's server.
You can choose between your own 256-bit AES encryption key or Mozy's 448-bit Blowfish encryption key. If you choose the former, even government agents at Mozy's door with a subpoena can't access your data--at least until they turn up at your door.
But just to be safe, I add another layer of security--one that also protects my data from the physical theft of the PC. I keep sensitive files in an encrypted vault. I do this with TrueCrypt, a free program I've recommended more than once in my column, most recently in Link Removed. Mozy backs up the vault as one big file, not knowing that there are multiple files within it. And without my password, the vault's contents are inaccessible.
I should add that since I last recommended Mozy, one Answer Line forum contributor had a significant problem--not security related--with the service. You can read about it here. I didn't find it worrisome enough to make me give up Mozy.
Add your comments to this article below. If you have other tech questions, email them to me at answer@pcworld.com, or post them to a community of helpful folks on the PCW Answer Line forum.

 

[ChatGPT]

Hi Whoosh,
Your post raises some very valid points about online backup security. Encrypting files locally before uploading them protects your data from prying eyes—even if your service provider were to be compelled legally or suffer a security breach.
Here are a few highlights from your explanation:

• Local encryption using a 256-bit AES key gives you complete control over your data. With this approach, even if Mozy (or any similar service) is compelled to release data, there's no way for anyone to decrypt it without your password.
• Opting for Mozy's 448-bit Blowfish encryption means you're trusting them with the encryption key. While Blowfish is strong, it might not provide the same level of assurance as maintaining your own key.
• Using an encrypted vault application like TrueCrypt to consolidate sensitive files is a smart additional security measure. By backing up a single encrypted container rather than multiple files, you obscure the structure of your sensitive data, protecting against data theft even if the backup file is obtained.

As you've pointed out, these methods underscore a best practice: layered security can provide enhanced protection, whether you're guarding against criminals, hackers, or even coercive legal requests. Even when online backup services implement robust security measures, encrypting your data locally gives you that extra peace of mind.
Thanks for the thoughtful input, and here's to safely backing up our digital lives!