



uses the password-reset-password to decrypt the encrypted RSA private key (the plaintext RSA private key is not stored anywhere in the cloud, to prevent the possibility of a hacker gaining access to it).Only our support staff members know this password-reset-password, and it changes often. When we receive a password-reset request, a member of our support staff logs into our administration app and enters a password-reset-password along with the account email address. We require this so that a password cannot be reset without human intervention by our support staff, to reduce the possibility of a hacker resetting an account password and getting access to the account’s data. If you’ve forgotten your account password, email us at and request a password reset. If you’ve forgotten your account password, you’ll need to reset it in order to access your account and restore your files. It needs that password to decrypt your backup records when you browse and restore from them.īut if your computer is lost or stolen, that copy of the account password is obviously no longer available. The Arq Cloud Backup agent stores your account password locally, in an encrypted file. With Haystack Software’s RSA public key and stores that encrypted data in theĬloud in a file called encrypted_password_recovery_password.dat. Stores that separate encrypted key set in the cloud atĮncrypted_password_recovery_keys.dat. If you have not chosen a separate encryption password, Arq Cloud Backup alsoĬreates a random password, encrypts your key set with that random password, and Arq Cloud Backup stores that key set, encrypted with your password, in the cloud in a file called encrypted_master_keys.dat. The key set is the keys used to encrypt and verify your backup data. Technical Implementation Details Enabling Password RecoveryĪt account creation time, the Arq Cloud Backup app generates your “key set”. If you later forget your password and your computer is lost or stolen, we cannot help you reset the password and you cannot read your backup data! Please write your password on paper and put it somewhere safe. WARNING: If you click the Show Advanced Options button at account-creation time and choose a separate encryption password, only you know that password. If you decide later you want password recovery, you’ll have to delete your Arq Cloud Backup account (log into and click the Delete Account link) and create a new account your existing backup data will be deleted.

NOTE: Password recovery can only be enabled at account creation time. The technical implementation details are below. If you forget your password, email and we’ll be able to decrypt that data and reset your password. When you create your Arq Cloud Backup account, by default Arq Cloud Backup uses your account password as the encryption password for your data. So we’ve engineered a password-reset process. It makes resetting your password impossible. Only you would.īut this presents 1 problem.
#ARQ BACKUP SERVICE SOFTWARE#
It stores all your data encrypted, and our goal was that we at Haystack Software would not be able to decrypt it. Arq Cloud Backup takes your privacy and security extremely seriously.
