Benefits:

• 128 or 448-bit file encryption
• 128-bit communication encryption
• Tamper-proof backup archives
• Open-sourced symmetric cipher (Blowfish)
• Unique cryptographic keys per user
• Flexible key escrow policy

Data Security and Protection

CrashPlan addresses regulatory data security and privacy concerns by employing a multi-layered security model that includes transmission security, account security (access), password security,encryption security and secure messaging. CrashPlan runs within the confines of a secure Java virtual machine. All cryptographic functions rely on the industry standard Cryptographic Extensions (JCE) provided therein.

Password Security and Encryption

Your first line of defense is a password protected user interface; you can require that CrashPlan prompt you for a password every time the application is launched to prevent unauthorized access to your archived data and backup settings. The account password is never stored or transmitted in plain text.

The second line of defense appears before your data ever leaves your machine. Backup data is encrypted with a 128-bit (CrashPlan) or 448-bit (CrashPlan+) data key before being transmitted using 128-bit encrypted communication. Data remains encrypted once it reaches the destination and is never unencrypted until restored by you. Keys are created using a secure random number generated from Sun Microsystem’s Java Cryptography Extensions framework and are escrowed with your archive at each destination so you can restore your files should you lose your computer. Archive encryption keys can be secured with your account password, a private password, or you can replace the key with your own data key. Visit our security FAQ for more detailed information.

Secure Online Storage

In addition to the security measures built into CrashPlan software, backing up online to CrashPlan Central, our online destination, offers the added protection of a state-of-the-art data storage facility. Your backup is stored in one of our data centers located throughout the US and around the world. All our data centers comply with data storage industry standards for secure physical access and up-to-date video surveillance. In addition, power and cooling redundancy guarantees very high availability and resiliency to failure. The facilities themselves protect CrashPlan's infrastructure from physical harm.