&gt;So to recap: if you never actually prepare a restore, we cannot possibly know what is in your files, but
if you prepare a restore (let&#x27;s say of a few files) then for the couple minutes they are being prepared and
downloaded they are in &quot;plain text&quot; on a HIGHLY SECURE system in the Backblaze datacenter.<p>LOL - so you get to choose between having a backup that you can&#x27;t verify by doing a test restore, or encryption that isn&#x27;t secure by putting your private key on an un-trusted&#x2F;non-audited server that you don&#x27;t control.<p>&gt; Backblaze focuses on ease of use.  It is backup for people who need backup and &quot;pretty good security&quot; and who aren&#x27;t computer professionals.<p>At least they acknowledge that &quot;computer professionals&quot; would likely be skeptical of these options; on the other hand, it seems like they are downplaying the lack of security in this scheme to their non-&quot;computer professionals&quot; clients:<p>&gt;All your files are encrypted before being transmitted over SSL and stored encrypted. [1]<p>EDIT:
&gt;... even a malicious hacker in our datacenter could not possibly compromise your data.. [2]<p>That&#x27;s just false, and I&#x27;d bet they know it.  I mean, they only use their root keys on an air-gapped (non-networked) host, right?  If not, then they should really consider hiring someone who understands security a little better.<p>Want to convince me your system is really &quot;HIGHLY SECURE&quot;?  How about guaranteeing $1,000,000 payout to the user in the event of a breach?  I mean it &quot;could not possibly&quot; happen, right? :D<p>[1] <a href="https:&#x2F;&#x2F;www.backblaze.com&#x2F;cloud-backup.html" rel="nofollow">https:&#x2F;&#x2F;www.backblaze.com&#x2F;cloud-backup.html</a><p>[2] (from the article) <a href="https:&#x2F;&#x2F;help.backblaze.com&#x2F;entries&#x2F;20926247-Security-Question-Round-up-" rel="nofollow">https:&#x2F;&#x2F;help.backblaze.com&#x2F;entries&#x2F;20926247-Security-Questio...</a>