I have two USB HDDs, both 4 TB in size, so they can hold (most of) my data. They’re LUKS encrypted. One is located at a family member, the other one is with me at home. Every now and then, I copy everything to the disk at home and then drive over to family and swap the disks.
The obvious downside is that the backups aren’t really recent. They’re maybe a month old, or older. I hope that that’s still recent enough to regain access to most stuff.
(Also, I stuck a little note on paper to a mirror near my door. It lists the things that I should take with me in case of a fire. There’s a bag nearby where I can put this stuff into.)
I have two USB HDDs, both 4 TB in size, so they can hold (most of) my data. They’re LUKS encrypted. One is located at a family member, the other one is with me at home. Every now and then, I copy everything to the disk at home and then drive over to family and swap the disks.
The obvious downside is that the backups aren’t really recent. They’re maybe a month old, or older. I hope that that’s still recent enough to regain access to most stuff.
(Also, I stuck a little note on paper to a mirror near my door. It lists the things that I should take with me in case of a fire. There’s a bag nearby where I can put this stuff into.)
I have two USB HDDs, both 4 TB in size, so they can hold (most of) my data. They’re LUKS encrypted. One is located at a family member, the other one is with me at home. Every now and then, I copy everything to the disk at home and then drive over to family and swap the disks.
The obvious downside is that the backups aren’t really recent. They’re maybe a month old, or older. I hope that that’s still recent enough to regain access to most stuff.
(Also, I stuck a little note on paper to a mirror near my door. It lists the things that I should take with me in case of a fire. There’s a bag nearby where I can put this stuff into.)
Other than that I don't have a good strategy either. Since I don't use 2FA and have some hard passwords memorized, I might be able to recover some data/accounts, but definitely not all. Have to come up with a suitable battle plan in the future.
Access is guaranteed through online interface with double authentication. So hopefully, I will never loose my smaphone :-)
i have an interesting approach which i'm planning to write about on blog/gemini.
it's fairly elaborate, but here's highlight:
- don't rely on sms or mobile device for anything
- main
.dotphilez
and other non-secret configs are encrypted and routed to five remote locations every 15 minutes to s3 endpoints (minio)- media replicates to 3 external drives, 3 external locations
- every system or service has no less than 3 hardware tokens strategically placed in places that aren't
~/
- bailout codes (glass-breakers) are individually secured and sharded. these live somewhere on the internet as fragments
~8y running this setup, haven't lost anything. have had drives, keys, media fail but there's always a way~
i intentionally delete systems and/or data to verify things are working.~