duplicity
Encrypted bandwidth-efficient backup tool using rsync algorithms and GPG.
Open the official app on duplicity.us
This tool is hosted by its maintainers. Click below to open duplicity.us in a new tab — it's their official demo.
Browse converters tools →What's next with duplicity?
Choose how you want to get started.
Use it free
Open the official tool or demo — no account needed.
Self-host it
Run the open-source version on your own infrastructure.
What is duplicity?
Duplicity is an open-source backup tool designed for encrypted, bandwidth-efficient data protection using the rsync algorithm. It enables users to create secure backups of directories by generating encrypted tar-format volumes that are uploaded to remote or local storage. The tool prioritizes space efficiency through incremental backups, which only store changes since the last backup. It is widely used by individuals and organizations for personal and corporate data preservation, addressing the need for secure, reliable backups that protect against data loss and unauthorized access. By integrating GnuPG for encryption and signing, duplicity ensures data confidentiality and integrity, making it a trusted solution for environments where security is critical. Its flexibility in supporting multiple storage protocols allows it to adapt to diverse backup requirements, from cloud services to traditional file servers.
How it works
Duplicity is a command-line utility that automates the backup process by combining librsync for efficient incremental backups with GnuPG for encryption. It is primarily used to safeguard sensitive data by encrypting backups before transmission, ensuring they remain private and tamper-proof. The tool's core purpose is to provide a secure, space-efficient method for backing up files and directories. It is particularly valuable for users who need to protect data from both physical and digital threats, such as hardware failure, cyberattacks, or accidental deletion. Duplicity supports incremental backups using librsync, which minimizes data transfer by only storing changes between backups. It also encrypts archives with GnuPG, ensuring data confidentiality. Supported storage protocols include Amazon S3, Backblaze, Dropbox, FTP, and Google Drive, enabling flexible deployment across cloud and local environments.
How to use it
- 1Install duplicity and GnuPG on your system. 2. Configure encryption settings using GnuPG keys. 3. Run the duplicity command with parameters specifying the source directory, backup destination, and encryption options. 4. Verify backups by restoring data or checking archive integrity. Practical tips include using command-line flags for scheduling backups and leveraging rsync's delta compression for faster transfers.
What it can do
- encrypted backup
Use cases
Assumptions and limitations
Assumptions
- source: https://github.com/duplicity/duplicity
- license: GPL-2.0 — free to use
- privacy: Self-hosted — you control your data
Limitations
- Dependence on GnuPG for encryption may complicate setup for non-technical users
- Learning curve associated with mastering command-line parameters and rsync mechanics
- Limited native support for modern cloud storage APIs compared to commercial alternatives
- Requires manual management of backup schedules and retention policies
- Potential compatibility issues with proprietary storage systems lacking rsync support
Understanding the result
Encrypted bandwidth-efficient backup tool using rsync algorithms and GPG.
Tool details
- Clearly flagged when a network request is needed.
- No account, no sign-up, and no tracking of your content.
- Powered by (MIT).
- Built with
- (duplicity/duplicity)
- License
- MIT
- Runs locally
- No — requires a network request
- Verification
- Not yet verified
- Input
- Query
- Output
- Text
Built with duplicity/duplicity. OpenToolVault provides the discovery and browser interface while crediting the original project maintainers.
- Built with
- License
- MIT
Open-source project
OpenToolVault is an independent directory. We are not affiliated with or endorsed by this project.
References
- / — GitHub Repository
Upstream project · GitHub
- GPL-2.0 License
Upstream project
Frequently asked
How does duplicity ensure data security during backups?
Duplicity encrypts backup archives using GnuPG before transmission, preventing unauthorized access. Data is stored in encrypted tar-format volumes, and GnuPG signatures verify archive integrity. This combination protects against eavesdropping and tampering, ensuring backups remain confidential and unaltered.
What makes duplicity's incremental backups efficient?
Duplicity uses librsync to calculate differences between file versions, storing only changed data blocks. This reduces storage requirements and bandwidth usage compared to full backups. For example, a 100GB file with 10% changes would only require 10GB of new data to be transferred for subsequent backups.
How do I restore a specific version of a file from duplicity backups?
Use the duplicity restore command with the --date option to specify the target timestamp. For example: duplicity restore --date=2023-07-24 /path/to/backup /path/to/restore. This retrieves the exact file state from the backup archive, leveraging rsync's delta compression for efficient restoration.
How does duplicity compare to rdiff-backup?
Both tools use librsync for incremental backups, but duplicity adds GnuPG encryption for secure backups. Rdiff-backup focuses on local backups with simpler configuration, while duplicity's support for cloud storage protocols like S3 and Dropbox makes it more versatile for distributed environments. Duplicity's rdiffdir utility also provides directory-level version control beyond standard file backups.
What should I do if duplicity fails to connect to my cloud storage?
Verify that the target protocol is supported (e.g., S3, Dropbox) and check credentials in the duplicity configuration. Ensure network connectivity to the storage service, and confirm that required dependencies like GnuPG are properly installed. Use --dry-run mode to test connections without data transfer, and review error logs for specific authentication or API-related issues.