Upgraded to 4.3 but forgot that the passphrase of the backup was inside the backup

For the people with minimal experience on backups, and how not to lose all their passwords.

My experience, -do not repeat-
I wanted to re do the installation of qubes on my laptop with raid1 (instead of just upgrading from 4.2, I don’t know if it was possible).
So I did back up of all the qubes on an external drive.
(vault vm has my main db with all my passwords for encrypted disks, -no back up of that though-)
I though though that the backup needs to be encrypted so I canceled the previous one and made a new with a passphrase I saved inside vaultvm.

Happy that I have the passphrase and the back up I followed the instructions to install 4.3 on raid1.

Cool, now the back up.

Encrypted with a passphrase I don’t know and only remember partial words from the eff_large_wordlist of keepassxc. In which I added also some number because I though it would be better.

FUN.

EDIT: I am able to be logged in here from another laptop that I thought to log in before starting the re-installation in case that I needed advice on something. I didn’t think at that moment to save the passphrase :confused:

EDIT2: If you know any ways that can mentally help me remember more of the words of the passphrase I am all ears. If someone wants to assist on breaking my passphrase (as that seems to only be the way to get my data back I will be following with a git repo with the scripts I will try) For compensation I can offer free beer if you make it to FOSDEM2026 :slight_smile:

Lessons learned the hard way.

3 Likes

Basically, you always need to have the passphrase available if the device you backup dies. You need to have a way to bootstrap into your recovery system, including access to backup if they are store remotely.

This is unfortunately a concept hard to understand until you get caught by it in a real scenario :pensive:

3 Likes

Sorry fellow Qubes user!

1 Like