Are my backups encrypted?

Yes. Backups are encrypted before they leave our servers. The storage provider only ever holds scrambled data. Encryption keys are stored separately, access is restricted and logged, and a backup is only opened when you restore, browse, download or copy it.

The details

• Encryption: AES-256-GCM, applied on WP Foreman’s servers before anything is uploaded.
• A key per site: each site has its own random 256-bit key. One site’s key can’t open another’s backups.
• Key storage: keys are kept in our database, encrypted with a separate application key that isn’t stored with the backups.
• Storage: Cloudflare R2, or your own storage if you choose. The provider only sees encrypted chunks with random names, in a folder named after the client and site; it can’t tell what file or table any chunk belongs to.
• In transit: everything moves over HTTPS, from your site to us and from us to storage.

Can WP Foreman see my backups?

Because we hold the keys, our systems can decrypt a backup. That’s what lets us restore your site, build a .zip download, or help when something goes wrong. We only do it for those jobs, and access is restricted and logged.

Private backup key (coming)

If you’d rather nobody else could ever open your backups, you’ll be able to turn on a private backup key: a passphrase only you know, which we never store. With a private backup key, nobody at WP Foreman can read your backups.