PC Backup
Log in Create account
Backups for VPS

Trust your backups.
You own your data.

Connect a server in one line. Run scheduled file and database backups. Restore a single table or an entire database — and verify every run by its checksum.

Create account See how it works
Go agent ed25519-signed AES-256 amd64 · arm64
runs run_4c7a
live
Started
03:00:07
Duration
48.9s
Size
2.31 GB
Artifacts
1,284
  1. queued a3f1…9c2e
    03:00:07
  2. dispatched 7b44…10af
    03:00:09
  3. running e0d9…2f13
    03:00:11
  4. sealed 4c7a…be51
    03:00:56
Artifacts
database.sql.enc 184.2 MB a1b7…04fe
files.tar.enc 2.13 GB 9f02…17dd
sha256 4c7a…be51 · 2.31 GB sealed
run_4c7a · sealed sha256 4c7a…be51 2.31 GB · 48.9s ed25519-signed self-update AES-256-CBC envelope RSA-OAEP key wrap customer-held key GFS · daily / weekly / monthly / yearly amd64 · arm64 queued → dispatched → running → sealed
Destinations

Send every backup where you already keep your data.

Point a job at an S3-compatible bucket or a local disk. Artifacts stream straight from the agent to the destination you chose — never through a storage provider you did not pick.

  • Any S3-compatible endpoint, Backblaze B2 included
  • Local disk for on-premise or air-gapped hosts
  • Per-destination usage and last-write health
Destinations 3 configured
Target Kind Used Last write Health
s3://acme-backups/eu-north-1 S3 412 GB 2m ago OK
/mnt/backup/vol1 Disk 1.94 TB 4m ago OK
b2://acme-vault B2 88.4 GB 2h ago Stale
Capabilities

Everything a careful operator needs, and nothing that gets in the way.

Scheduled runs
Hourly to yearly, with per-job retention windows.
Database-aware
Dumps PostgreSQL and MySQL — whole databases or single tables.
Integrity by default
SHA-256 checksum on every artifact, verified on restore.
Alerts that act
Email and webhook notifications on the first failure.
Envelope encryption
AES-256-CBC with a per-run key wrapped by RSA-OAEP.
Zero-knowledge option
Hold the private key yourself; the control plane never sees plaintext.
Encryption · envelope
Data Plaintext on the server, ciphertext everywhere else
AES-256-CBC
Key One 32-byte key, generated per run
RSA-OAEP · SHA-256
Digest Verified before and after transfer
SHA-256 / artifact
Mode You can hold the private key yourself
customer-held
customer-held key zero-knowledge
Encryption

Encrypted on the server, before it ever leaves.

Data is sealed with a fresh key per run. That key is wrapped to the public key for the job, so neither the transport nor the destination can read plaintext.

  • One 32-byte data key, never reused across runs
  • Hold the private key yourself for a zero-knowledge setup
  • Checksum verified end to end, on restore as well
How it works

Three steps from a fresh server to a restorable backup.

  1. 01

    Install

    Run one line on the server. The agent registers with your enrollment token.

    systemctl status pcbackup-agent active (running)
  2. 02

    Schedule

    Define a job once. It runs on the clock you set, unattended.

    0 3 * * * daily · 03:00
  3. 03

    Restore

    Pull a single table or a whole database back, from any sealed run.

    pcbackup restore --table users restored · 12.4 MB
Install

One line on the server. No agent to babysit.

Paste the command, and the agent installs itself, enrolls, and starts on schedule. Run it on amd64 or arm64.

Registers the server with your enrollment token.
Runs as a systemd unit and reconnects on its own.
Streams encrypted artifacts straight to your destination.
Self-updates from ed25519-signed releases.
root@web-1: ~
$ curl -fsSL https://backup.pinecone.no/install.sh | bash -s -- --token=<enrollment-token>
installing pcbackup-agent ok

Requires root · installs a systemd unit · amd64 and arm64

Proof

Facts you can check, not claims you have to trust.

Every mechanism above is a named, verifiable detail. Here is the whole stack in one place.

Agent runtime
Go agent · single static binary
Self-update
ed25519 signature · SHA-256 checksum
Data encryption
AES-256-CBC
Key wrapping
RSA-OAEP · SHA-256
Key ownership
customer-held (zero-knowledge)
Integrity
SHA-256 per artifact
Retention
GFS · daily / weekly / monthly / yearly
Architecture
amd64 · arm64
Closed beta

In closed beta. Invite only.

PC Backup is in an invite-only closed beta while we harden every path. You connect the servers, keep every artifact in storage you control, and we run the panel for you.

Closed beta

Invite only

The full control panel, hosted and maintained for you. Access is granted by invitation.

  • Unlimited servers and agents
  • All destinations and encryption modes
  • GFS retention and integrity checks
  • Self-updates from signed releases
Create account
Get started

Connect your first server in minutes.

One line on the server. Your first sealed, verifiable backup before the next scheduled window.

Create account See how it works

Closed beta. Invite only.