Skip to main content

Restore an encrypted backup

An encrypted backup deliberately cannot be opened as ordinary files. Recovery begins by unlocking the backup with either the password chosen during setup or its recovery key. The encryption does not depend on the original Windows account or original PC.

What you need​

You need all three of these:

  1. The complete backup destination.
  2. O&O AutoBackup or the portable Recover this backup application stored with the backup.
  3. Either the backup password or the matching recovery key.

A product license is not required when the recovery copy stored with the backup is launched in its restricted recovery mode. It restores that backup only and does not configure the new PC.

Restore with the password​

  1. Connect or open the backup destination.
  2. Start O&O AutoBackup and choose Restore from an existing backup, or double-click Recover this backup at the destination.
  3. Select the encrypted backup if it is not already selected.
  4. In This backup is encrypted, enter the password.
  5. Optionally select Remember on this PC. This allows scheduled backups on this PC to run without prompting; it does not remove the password requirement on another PC.
  6. Choose Unlock.
  7. Select the restore point, files, and destination, then start the restore.

An incorrect password changes nothing at the destination. Check keyboard layout and Caps Lock, then retry.

Restore with the recovery key​

If the password is unavailable:

  1. Open the unlock dialog.
  2. Expand Password forgotten? Use the recovery key.
  3. Enter or paste the saved recovery key. Upper/lower case and dashes do not matter.
  4. Choose Unlock and continue with the normal restore selection.

The recovery sheet includes a Vault ID. Compare it with the Vault ID shown for the encrypted backup to make sure you are using the correct key.

Anyone who possesses the recovery key can read that backup. Store it as carefully as the password and separately from the backup drive.

If file and folder names are hidden​

When Also hide file names and folders was enabled, the destination contains random stored names and an encrypted index. This prevents someone from learning even the names and organization of your files.

Do not rename, move, or delete files in the _ooab-data folder or the encrypted index. Use O&O AutoBackup to browse and restore. If the list is missing or incomplete, Repair file list can rebuild it from stored files after the backup is unlocked, although some historical move/deletion details cannot be reconstructed.

Recover onto a replacement PC​

  1. Connect the backup drive to the replacement PC.
  2. Launch the portable recovery app from that drive. If it is missing, install or download O&O AutoBackup and point it at the backup folder.
  3. Unlock with the password or recovery key.
  4. Restore to a new folder on the replacement PC.
  5. Open representative documents, photos, and archives before deleting any remaining old copy.

If both credentials are lost​

There is no back door. O&O Software cannot reset the encryption or derive either credential. This is a security property: a lost or stolen destination is protected—but losing both password and recovery key makes the backup permanently inaccessible.

Test both ways in

After creating an encrypted backup, perform a small test restore with the password and verify that the recovery key is readable and stored separately. Do not wait for an emergency to discover that the only copy of the key was on the failed PC.