Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
I encrypt some of my back-ups -- especially ones kept off-site for business insurance reasons. But my time machine copy and bootable clone drive for my home computer, which are kept nearby are not because they are intended to ensure against data loss (not data theft) caused by hardware failure on my primary machine. The risk of data theft for those are minimal -- I hope.
 
  • Like
Reactions: Marty_Macfly
The article brings up good points for and against encrypting backups, and I agree it warrants some careful thought.

One (minor) additional point in favor of encrypting backups: when a HDD becomes unreliable or fails, you don't have to worry about people getting data from it, even if you're unable to do a complete secure erase or destruction of the HDD before disposal.

If you have trouble getting the drive to work, a secure erase may fail or only partially work. But I think it's plausible that someone else with more sophisticated software and hardware tools might well be able to copy data from it. Presumably in that case one would disassemble or destroy the HDD in some manner. But how many people will really do that?

That said, I'm more concerned about losing access to my data (mainly photos and home video files) than I am about someone else getting it. Although I can't quite come up with a scenario where a backup's encryption would prevent me from restoring my data, I have a nagging worry that it's possible in some way I haven't thought of. So for myself, I lean toward having at least one unencrypted backup.

Edited to add --- All the data that I consider could be seriously abused (e.g., personal financial records) I already store in an encrypted disk image. So that material IS encrypted even on my unencrypted backup.
 
Last edited:
  • Like
Reactions: Marty_Macfly
A backup should be EASY to "get to" in a moment of "extreme need".

ANYTHING you do to it that will make data access more difficult should be avoided.

For this reason, I WOULD NOT encrypt a backup drive.
Keep it in a locked drawer, safe, or well-hidden instead.

Having said that, I do keep one backup partition on a drive in my car that IS protected with a password (created when using disk utility to format the partition). Someone could steal the car, and in that case, they might get the drive, but not the financial data I keep on it.

However, I still don't use filevault on it...
 
Last edited:
  • Like
Reactions: Marty_Macfly
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.