Support

Akeeba Backup for Joomla!

#32069 – Encryption option or encrypted JPS archive?

Posted in ‘Akeeba Backup for Joomla!’
This is a public ticket. Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Monday, 02 December 2019 07:52 CST
Hi,
I've just upgraded from Akeeba backup core to Professional 6.6.1. There are two encryption options that I see: 1) in the global options there is an encryption yes/no option or 2) JPS archive with encryption.
Which is the better choice here?
As I understand 1), it puts a key in the database and in a file on the server, and may not work if transferring to a new server. 2) appears to just be an encryption of the archive file, stored in the file header, like an encrypted zip file.
I may be wrong about this, so please correct/ clarify if needed!
Would #2 be the safer and more compatible option in that it a) may transfer between servers better and b) may not be compromised if an attacker has access to the server's files (in which case one would be hosed anyway, of course).

Thank you for any clarification / suggestions --- and thank you for a great product!

Ari
Custom Fields
Joomla! version (in x.y.z format) 3.9.13
PHP version (in x.y.z format) 7.2.25
Akeeba Backup version (x.y.z format) 6.6.1
adoucette
Monday, 02 December 2019 09:02 CST
Ari,

You probably want both, they do two completely different things. The encryption option in Options encrypts your Akeeba Backup settings. Keep in mind that if you're using post processing to cloud storage (or even encrypted archives) then you have passwords in this data. This option makes sure those passwords are not accessible directly from the database.

Your backup archive itself is a security risk under some circumstances. The configuration.php file has your database access details, in some setups it also has FTP access details. There's lots of sensitive data in there. The JPS file format is very much like an encrypted zip file, the contents can't be extracted without the proper password.


Dale L. Brackin

Support Specialist



English: native



Please keep in mind my timezone and cultural differences when reading my replies. Thank you!



dlb
Monday, 02 December 2019 09:13 CST
Am I to understand then that the encryption option above (#1) encrypts only the settings from akeeba backup, and does not encrypt the backup archives?
Is there a potential that enabling #1 may cause difficulty moving to a new server if that is ever necessary? (What extra steps, if any, would be required to move to a new server due to this encryption being enabled?)

Thanks again,
Ari
adoucette
Monday, 02 December 2019 09:20 CST
Ari,

#1 only encrypts the Akeeba Backup settings. That option will travel well to a new site, you won't need to do anything special on the new host. or server.

#2 encrypts the backup archive itself.


Dale L. Brackin

Support Specialist



English: native



Please keep in mind my timezone and cultural differences when reading my replies. Thank you!



dlb
Monday, 02 December 2019 09:23 CST
Nice, thanks. Will start using both then.
adoucette
Monday, 02 December 2019 09:29 CST
You're welcome!


Dale L. Brackin

Support Specialist



English: native



Please keep in mind my timezone and cultural differences when reading my replies. Thank you!



dlb
Wednesday, 01 January 2020 17:17 CST
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.
system
This ticket is closed, therefore read-only. You can no longer reply to it. If you need to provide more information, please open a new ticket and mention this ticket's number.

Support Information

Working hours: Typically we work Monday to Friday, 9am to 7pm Cyprus timezone (EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets, but we cannot respond to them, outside of our working hours.

Upcoming unavailability: We will be closed December 23rd, 2019 19:00 to January 3rd, 2020 10:00 Cyprus timezone (EEST) due to the Holiday Season. You will not be able to file new support tickets or reply to existing ones.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!

Cookies Notification - Action required

This website uses cookies to provide user authentication and improve your user experience. Please indicate whether you consent to our site placing these cookies on your device. You can change your preference later, from the controls which will be made available to you at the bottom of every page of our site.