Secure 128-bit SSL communication:

All communications between the Backups4All server and your computer are transported in a 128-bit
SSL (Secure Socket Layer) channel. Although all your backup files travel through the public Internet, eavesdroppers will not be able to read your data.
Backup data are securely encrypted:

All of your files are first zipped (compressed) and encrypted (scrambled) with your defined encryption key before they are sent
to the Backups4All servers. Anybody attempting to read your files without access to your encryption key would see no
more than a collection of meaningless random symbols.
Encryption keys are well protected:
The encryption keys used to encrypt your files reside only on your computer and are known only to
you. They are never transmitted anywhere across the Internet. Thus, even Backups4All system administrators will
not be able to decrypt and view the content of your files stored on the backup server without your
permission. This does mean however that if you lose your keys, you will never be able to recover
your backup files.
Encryption algorithm used:
Currently, the algorithm that we are using to encrypt your files is 128-bit Twofish. It is a block cipher
designed by Counterpane Labs. It was also one of the five Advanced Encryption Standard (AES)
finalists chosen by the National Institute of Standard and Technology (NIST). It is subject to frequent public reviews but no known attack against this algorithm has been reported.
It would require 8.77 x 10^17 (10 to the power of 17 which is 10 followed by 17 zeros) years to crack the 128-bit encryption:
A 128-bit key size has 21^28 or around 3.4 x 10^38 possible combinations.
Even if you had access to a mainframe super computer, it would take around 8.77 x 10^17 years to test all combinations using a brute force attack.
You can be sure that your data stored on our server is as close to being 100% secured as is possible.
Restrict access to data by IP addresses:
You can also restrict access to your backup files to a set of IP addresses which you define. If
someone tries to access your data from an IP address not on your defined list, their access will be
denied. This additional security ensures backup files are only available at selected locations - even when the username
and password are known. |