How to back up your vault to the cloud
Back up your vault to the cloud. It is encrypted end-to-end on your device, verified with a SHA-256 checksum, and the server stores only ciphertext.
Last updated June 6, 2026
Quick answer: Turn on cloud backup in Vaultr and your vault is encrypted end-to-end on your device before upload, then verified with a SHA-256 integrity checksum. The server only ever stores ciphertext — never your readable data — and you can restore at any time or delete the backup on demand.
What is cloud backup in Vaultr?
Cloud backup is an encrypted copy of your vault stored remotely so you can recover your data if your device is lost, stolen, or replaced. Because Vaultr is non-custodial, the backup is end-to-end encrypted on your device before it ever leaves, so the server holds only an unreadable blob of ciphertext.
The core guarantees are:
- Encrypted on-device first — encryption happens locally, before upload.
- SHA-256 integrity checksum — confirms the backup was not corrupted or tampered with.
- Restorable at any time — pull your vault back whenever you need it.
- Deletable on demand — remove the backup whenever you choose.
How do I create a cloud backup?
- Open Backup settings in your Vaultr profile.
- Enable Cloud backup.
- Vaultr encrypts your vault on your device using your local keys.
- A SHA-256 integrity checksum is computed so the backup can be verified later.
- Only the resulting ciphertext is uploaded — the server never sees your plaintext data.
Because the encryption happens before upload, the cloud only ever stores something it cannot read. Even if the storage were accessed, your vault contents remain protected.
How do I restore from a backup?
You can restore at any time:
- On the device where you want to restore, open Backup settings.
- Choose Restore from cloud backup.
- Vaultr downloads the ciphertext and verifies it against the SHA-256 checksum.
- The vault is decrypted on your device and your data is back in place.
The checksum step matters: it confirms the backup is intact and has not been altered before Vaultr trusts it. If the data fails verification, it will not be silently restored.
How do I delete a backup?
Cloud backup is deletable on demand. From Backup settings, choose to delete your cloud backup and the stored ciphertext is removed. This puts you in control of how long any encrypted copy of your vault exists.
Why is server-side ciphertext-only important?
Many services upload your data and encrypt it on their end, which means they technically can read it. Vaultr does the opposite: encryption happens on your device first, so the server stores only ciphertext.
This end-to-end model means:
- Your privacy does not depend on trusting the server operator.
- A server breach exposes only unreadable, encrypted data.
FAQ
Can Vaultr read my cloud backup?
No. Your vault is encrypted end-to-end on your device before upload, so the server stores only ciphertext. Vaultr cannot read the contents.
How do I know my backup is not corrupted?
Each backup is verified with a SHA-256 integrity checksum. On restore, Vaultr checks the data against this checksum to confirm it is intact before decrypting it on your device.
Can I remove a backup later?
Yes. Cloud backup is deletable on demand — you can delete the stored ciphertext whenever you choose.
Learn more about security.
Didn’t find what you needed?
Back to the Knowledge Base