Wasabi Backup Best Practices
Common mediums for backups
Written on a piece of paper
- Anyone who can see it, can steal it
- Handwriting can be hard to read or completely illegible
- Human error in transcription can cause errors on the end product
- Paper can rot, be torn, burn, or be smoke damaged
Printed on a piece of paper
- Anyone who can see it, can steal it
- Type of printer - non-laser printers ink can run if the paper gets wet
- Have to trust printer - some have internet connections, wifi, and memory
- Paper can rot, be torn, burn, or be smoke damaged
On laminated paper
- Anyone who can see it, can steal it
- Lamination is prone to degradation over time, as well as punctures or cuts that could allow moisture to get trapped in the paper and cause deterioration or rotting in some circumstances | store in cool dry place
- Can burn or be smoke damaged
- 'Fireproof' & 'Fire-resistant' boxes can help protect paper in a small house fire but be warned that they can sometimes fall apart in the fire and get wet if the fire is put out with water. Remember people can just carry out a small safe
Engraved / etched / ablated / stamped on a piece of metal
- Anyone who can see it, can steal it
- Some metals can deteriorate or corrode, choose a good metal; also store your metal away from direct contact other metals.
- Some metals that are corrosion resistant have low melting points, are extremely expensive, or hard to machine.
- Metals can still deform or melt from heat, destroying any engraved SK. "Most house fires do not burn hotter than 1,200 degrees Fahrenheit. This temperature is typically associated with the hottest portion of a home, which is in the roof area. Homes that burn for longer than 30 minutes or consist of multiple levels sometimes burn at higher temperatures." You want to pick a metal that won't be destroyed by a fire. So magnesium, tin, and lead are all out as engraving materials.
- Silver, gold, copper, brass, bronze, nickel, cobalt, would survive the housefire unmelted. Some Aluminium alloys can survive but you have to have the right ones. At around 1500° Steel and Nickel should be okay. Titanium is above the housefire range and so is tungsten, however tungsten rings are known to shatter due to the brittle nature of the very hard metal.
Stored digitally on a computer
- Computers can crash, making data recovery expensive
- Data can still technically be recovered after a system is abandoned by the user. In some cases data can be recovered after multiple overwriting attempts and physical destruction (as long as the attacker can get all or most the of pieces) so if you copy files to a new computer and ditch the old one, be careful.
- Can burn or be smoke damaged
- A traditional hard disc drive can have data corrupted by powerful magnetic fields and can physically shatter
- A non-negligible amount of HDDs suffer from factory defects that will cause them to fail unexpectedly during their lifetime
- Accidents can happen that could result in loss of data
- Solid state drives (SSDs) will lose data if unpowered, they may last years before this becomes a problem but it is unwise to store long-term data in unpowered SSDs
- Connecting to the internet is another attack vector and the safety is only as good as the encryption used; I don't know what I would recommend but it wouldn't be BitLocker. Someone could be trying to break into the computer constantly. Even with good encryption if the machine or location is compromised the key could be stolen as soon as it is decrypted.
- There are a lot of ongoing threats with computers, from 0-day exploits to firmware exploits and malicious USB cords
- External HDDs are good for storage for a few years at least if stored properly
- If not connected to internet, safety is only as good as the physical protection encryption used; could someone break into the location and copy the data without anyone noticing?
Stored digitally on CD, floppy disk, laserdisc, or mini-disc
- Plastics break down over time and with exposure to heat, humidity, regular light, all sorts of chemicals, even the oxygen in the air. This can lead to the loss of your data when stored on a medium made of plastic or written/printed on plastic.
- Can burn or be smoke damaged
- Can be physically damaged, making data recovery expensive or even impossible
- Magnetic media (tapes, floppy disc) can be damaged by magnets
- Data can become difficult to recover if the software and/or hardware to decode is old, don't use proprietary formats
Stored digitally on a flash drive
- Can break and have to be physically repaired before use
- Rapidly changing magnetic fields (See MRIs) can damage the data stored on flash drives
- Can burn, or be smoke damaged
- Can become corroded from salt water or some atmospheric conditions
- If they break apart, some lighting conditions can cause data corruption (you can also put them back together and often still get the data)
- Different devices are inconsistent. Even similar devices from the same production batch can be different. There are large quality differences in drives, but I am assuming you aren't using these for anything but storage.
- There are some fake flash drives that look like they saved the data but you can't get it back later.
- Flash drives are not advised for long term storage; they can be used as one part of a multi-medium-location-format plan.
A pre-funded physical bitcoin coin (where the manufacturer generates and installs the secret key)
- The medium that the key is on is often paper/plastic which can burn or be smoke damaged
- Trust in the manufacturer themselves, they could copy the key
- Trust in their key generation procedure
- Trust in the operational security of the manufacturer, they could be generating the keys on their everyday computer
- Trust no one is successfully spying on them, electronically, looking through their documents while they are out of town, or with tiny tin foil hat cameras or long range ones
- Trust that the object was not tampered with in delivery
- Trust that no one has tampered with the object since you got it
These are the methods you can use for your Wasabi backup and their benefits and tradeoffs.