🔐 AES-256 🔑 Optional 🖥 Encrypted on Your Server 📦 No Vendor Lock-In 🔐 AES-256 🔑 Optional 🖥 Encrypted on Your Server 📦 No Vendor Lock-In
Encrypted Backup

Your Backup Should Leave Your Server Encrypted
AES-256 · Optional · On Your Site's Server

With many backup methods, data reaches the service provider before it is encrypted. With Yedekalma, if you turn encryption on, the archive is encrypted on your own server before the backup leaves it, and travels to your storage encrypted. Encryption is optional; you turn it on per domain.

🎁 Start Free See Pricing

No credit card required · free trial until the end of the year

Architecture

How the Encryption Chain Is Built

Order matters: data must be encrypted before it touches the network.

1️⃣

Packaged on your server

Files, the database dump and messages are archived on your own machine.

2️⃣

Encrypted there

If you turned encryption on, the archive is encrypted with AES-256. This step happens on your server.

3️⃣

Transferred encrypted

By the time it reaches the network it is already encrypted; transport is additionally protected by TLS.

4️⃣

Written to your storage

The encrypted file is written directly to your storage destination; it is not stored on our servers.

Passphrase Management

How Is the Passphrase Managed?

🔑

You set the passphrase

You set the passphrase in the module's “Backup Encryption” tab and enter the same one in the panel only for verification; you turn encryption on for the domains you choose.

🛡

We cannot open it

The passphrase is not stored on our side; the panel keeps only a one-way verifier (PBKDF2). We cannot open your encrypted backups.

🚫

Verification continues

For encrypted backups too, presence at the destination and integrity (size/checksum) are checked, and each backup gets a Backup Report Card in the panel.

📦

Opened with the module

Encrypted archives are opened with the Yedekalma module or the free WordPress plugin. With encryption off, backups are standard zip, SQL and .eml files.

Keep your own copy of the passphrase

If you lose the passphrase, encrypted backups cannot be recovered. We do not store it, so keep a copy yourself; you also enter it during a restore, and if you ever need to open an encrypted archive manually with the module, outside the panel, you will need the passphrase.

Keep the passphrase somewhere independent of your site's server — ideally in a password manager. Encryption is a privacy layer; the real protection against deletion is copies kept in separate locations and, if needed, an immutable (WORM) backup.

FAQ

Encrypted Backup — Frequently Asked Questions

If you turned encryption on, the archive is encrypted on your own server before the backup leaves it. From the moment the file reaches the network it is already encrypted, and the transfer is additionally protected by TLS. Encryption is optional; on domains where you don't turn it on, backups travel unencrypted.
The passphrase lives only on your server, in the module's “Backup Encryption” tab (or the WordPress plugin's settings). You enter the same passphrase in the panel, but the panel keeps only a one-way verifier (PBKDF2), never the passphrase itself. Because we do not store it, we cannot open your encrypted backups. During a restore you enter the passphrase yourself. Requires module 1.45.0+ or WordPress plugin 1.67.0+.
Encrypted backups cannot be recovered without the passphrase. We do not store it, so we cannot remind you of it or reset it. Keep a copy in your password manager.
AES-256 is used: the symmetric encryption algorithm regarded as the standard today and widely chosen at enterprise level.
No. The backup is packaged on your server (and encrypted there if encryption is on) and uploaded directly to the storage destination you chose. It is not stored on our servers. We call this Zero-Server-Storage.
If you turned encryption on, the archive is in Yedekalma's own encrypted format and is opened (with your passphrase) using the Yedekalma module or the free WordPress plugin. With encryption off, archives are in standard formats (zip for files, an SQL dump for the database, .eml for emails) and open without any of our tools. Even if your subscription ends, your backups stay in your own storage.

Let Your Backup Leave Your Server Encrypted

Encryption on your server, a passphrase you set, the backup in your own storage. Free until the end of the year.

Create Free Account

See pricing →