Server Backups
Encrypted Backups
AES-256-GCM encryption for backups containing sensitive server data.
Last updated on
Backups can be encrypted with a passphrase you choose, using AES-256-GCM — a strong, industry-standard encryption method. This is useful if your backup contains anything sensitive you don't want readable without your passphrase.
Encrypt an existing backup
/backup lock backup_id passphraseRemove encryption
/backup unlock backup_idYou'll need the original passphrase to unlock it.
Lumière never stores your passphrase. If you lose it, an encrypted backup cannot be recovered or unlocked by anyone — including Lumière support. Keep it somewhere safe, like a password manager.
Encrypting at creation time
You can also skip this two-step process and encrypt a backup the moment it's created — see Creating a Backup.