CrashPlan allows you to increase levels of security for securing your encrypted data. The archive encryption security options are:

• 448-bit encryption (default)
• 448-bit encryption + password
• 448-bit encryption with custom 448-bit key

This article assumes you are familiar with these concepts:

• Archive Encryption Key Security

• Each increased level of security requires greater management. If you lose or forget your archive password or your custom 448-bit key, there is no way to recover the backed up files. CrashPlan Support has no way to assist in recovery.
• WARNING! When you upgrade security to a custom 448-bit key, all previously backed up files associated with the old encryption key are deleted from the backup archive and backup starts new.
• WARNING! Always store your encryption key in a plain text (.txt) file and work with a plain text editor such as vi, vim, emacs, nano, pico, Notepad or TextMate. Word processors such as Word, Wordpad, Pages, or OpenOffice Writer introduce additional formatting characters and should be avoided when working with encryption keys.

There are two options to upgrade your archive encryption key security:

• 448-bit encryption + password (stronger security)
• 448-bit encryption with custom 448-bit key (strongest security)

When you upgrade your archive encryption key security to 448-bit encryption + password, you add another layer of security to your backup.

WARNING! There is no way to recover your backup if you ever lose or forget your archive password. CrashPlan Support has no way to assist with archive password recovery.

1. Open CrashPlan.
2. Click Settings.
3. Click Security.
4. In the Archive Encryption area, click 448-bit encryption + password.
5. In the Archive Password window, enter the password you'd like to use as your archive password.
6. Retype the archive password, exactly as you typed it above.
7. Click OK.
8. On the Settings page, click Save.

When you upgrade your archive encryption security to 448-bit encryption with custom 448-bit key, you replace the default encryption key with an encryption key of your choosing. This custom 448-bit encryption key is never sent to the CrashPlan data centers and is stored only on the source device. You can create your custom key in several ways:

• Enter a passphrase that generates a 448-bit key that you paste into the encryption key box
• Allow CrashPlan to generate a 448-bit key for you
• Import an existing 448-bit key from a plain text file (.txt)

Once you've selected the method for generating your new data key, you can export the key to a plain text file (.txt). Exporting the data key to a file makes it easier to locate the key in case you forget it. When you need to supply the data key on another computer to which you want to recover files, you can use the Import option to import the encryption key from the text file.

WARNING!

• When you upgrade to 448-bit encryption with custom 448-bit key, all previously backed up files associated with the old encryption key are deleted and no longer available for restore.
• Your encryption key must be stored in a plain text (.txt) file.
• There is no way to recover your backup if you ever lose or forget your custom 448-bit key. CrashPlan Support has no way to assist with custom 448-bit key recovery.

1. Open CrashPlan
2. Click the Settings page.
3. Click the Security tab.
4. In the Archive Encryption area, click 448-bit encryption with custom 448-bit key.
5. Click the Passphrase option.
6. Enter the text for the passphrase.
7. In the Repeat box, enter the passphrase again.
8. Click OK.
   CrashPlan generates a private key.
9. On the Settings page, click Save.
10. Export your data key and save to a plain text document (.txt).
    Use a plain text editor such as vi, vim, emacs, nano, pico, Text Wrangler, Notepad++, TextMate, etc. to create the plain text (.txt) document.

1. Click the Settings page.
2. Click the Security tab.
3. In the Archive Encryption Key area, click 448-bit encryption with custom 448-bit key.
4. Click the Generate option.
   CrashPlan generates the text for your new data key.
5. On the Settings page, click Save.
6. IMPORTANT: Export your data key once a key has been generated.

Once you have set or generated a custom 448-bit key, export the key for safe keeping when you need to restore.

1. Open CrashPlan
2. On the Settings page, click the Security tab.
3. In the Archive Encryption area, click Export.
4. Enter the name of the file to which you want to export the data key. This must be a plain text (.txt) file.
5. Click Save.
6. On the Settings page, click Save.

WARNING!

• Always save your data key in plain text file (with the .txt extension).
• Word processors such as Wordpad, Word, Pages or OpenOffice Writer add formatting characters and should be avoided when saving or importing your custom 448-bit key.

1. On the Settings page, click the Security tab.
2. In the Archive Encryption area, click 448-bit encryption with custom 448-bit key.
3. Click the Import option.
4. Navigate to the file you wish to import.
   Important! The encryption key you are importing must be saved as a plain text (.txt) file.
5. Click OK.
6. On the Settings page, click Save.

• Archive Encryption Key Security
• Reference - Security Settings