Skip to content
Start freeMenu

Product · Encryption

Your keys never leave your Xtic server.

Choose per plan: no encryption, the platform key (BMENC v1, with a recovery kit), a password, or public-key encryption to keys only you hold. Every encrypted file opens with published tools.

Platform-key encryption
  1. 01Archive stream
  2. 02Per-file data key
  3. 03Wrapped by your key ring
  4. 04BMENC v1 file
  5. 05Recovery kit

  • Four modes

    None, Platform key (BMENC v1), Password (OpenPGP, zip-AES or 7z AES) and Public key (OpenPGP recipients — even Xtic cannot read those backups).

    Read the docs

  • Recovery kit

    A printed recovery key and instructions that open platform-key backups even if the Xtic server is lost.

    Read the docs

  • An open, documented format

    BMENC v1 is published with test vectors and a reference script, so a restore never depends on Xtic.

    Read the docs

  • Key rotation

    Rotate the key ring and re-wrap old backups without re-uploading them.

    Read the docs

More of Xtic