Clear text password stored in Duplicati-server.sqlite

[JonMikelV]

Yes, the Windows (only) database is RC4 “encrypted” but I’m not sure what the password is.

About Duplicati Security

I think there are a few issues mixed up in here. There are different credentials: Remote store credentials Backup encryption phrase Database password Service password OS credentials As Duplicati is supposed to run backups regularly without user intervention, it is difficult to balance the need for security with the need for simplicity. For protecting the files on the remote store, the files are compressed and encrypted, cutting off attacks on the files. Once an attacker has access to your …