Encryption

Encryption

MokoSuiteBackup supports AES-256 encryption for backup archives, providing GDPR-compliant protection for offsite storage.

How It Works

1. Set an Encryption Password in the profile's Archive Settings tab
2. After the ZIP archive is created, every file inside is encrypted using AES-256
3. The resulting archive is WinZip-compatible — can be opened with 7-Zip, WinZip, or any AES-capable tool
4. The SHA-256 checksum is computed after encryption (verifies the encrypted archive)

Requirements

• PHP 7.2+ compiled with libzip 1.2.0+
• Uses ZipArchive::EM_AES_256 (checked at runtime with clear error if unsupported)

Setting Up

1. Edit a backup profile
2. Go to the Archive Settings tab
3. Enter a password in the Encryption Password field
4. Save — all future backups with this profile will be encrypted

Restoring Encrypted Backups

Admin Restore

When restoring an encrypted backup from the admin UI, provide the decryption password in the restore form.

MokoRestore (Standalone)

The standalone restore.php script includes a password field in Step 2 (Extract). Enter the same password used during backup.

Manual Extraction

Use any tool that supports AES-256 ZIP encryption:

7z x backup.zip -p"YourPassword"

Best Practices

• Use strong passwords (16+ characters)
• Store the password separately from the backup (e.g. password manager)
• Test decryption after the first encrypted backup
• Different profiles can have different passwords (or no password)

Printed from wiki · Encryption