View source for Privacy of files backed up with BUS

__NOTOC__
==BUS File Privacy==
Files backed up with the BUS are protected in multiple ways.  The '''access password''' guards access to your data on the BUS server.  In addition, the files are encrypted by the client software before transmission to the server.  The '''encryption key''' used to encode your files is separate from the access password, although they can be set to the same thing.

==Managing Your Encryption Key==
When a new backup set is created, you are given the option to use the access password as the encryption key.  Should you do this?  Here are the arguments for and against:
* '''For''' - setting the encryption key the same as the access password simplifies management.  It means you only have to remember/track one password to get access to your files, and to decrypt them.  Also, if you ever lose the encryption key, you CAN NOT decrypt your files -- the backups will be useless.
* '''Against''' - If you use the access password as the encryption key, then someone who gets your access password can both retrieve your files from the server, and decrypt them.  Since SWCP assigned the initial password, it's possible (however unlikely) someone could get that password and use it to access your files.
One more note: '''changing the access password that does not change the encryption key.''' 

===Backing Up The Encryption Key===
The encryption key is stored in the client software.  '''It is never transmitted to the server.'''

Customers are advised to store a copy of the encryption key in a safe place, not physically located with the computer being backed up.  (You don't want a theft to give the thief the key to your files, nor a fire to destroy your ability to restore).   A fire-proof safe at a different location or a safe deposit box at a bank are two good places to store it.

==Who Can Access My Files On The BUS Server?==
You must have the access password to see the files you have backed up on the BUS server.  SWCP employees with access to the BUS server for support reasons are able to see the list of files which are backed up.  They cannot see the contents of the files, because they are encrypted.

If a third party were to get hold of your files from the BUS server (through a criminal break-in, or government seizure, or in service of a Court Order), they would see the list of your files, but they will not see the files' contents.

The Southwest Cyberport [[Privacy Policy]] applies to your BUS data.

[[Category: BUS]]