borg-key-export(1)

Name
borg-key-export - Exports a borg key of the repository for backup.

SYNOPSIS

borg [common options] key export [options] [PATH]

DESCRIPTION

This command backs up the borg key.

If repository encryption is used, the repository is inaccessible without the borg key (and the passphrase that protects the borg key). If a repository is not encrypted, but authenticated, the borg key is still needed to access the repository normally.

For repositories using keyfile encryption the key is kept locally on the system that is capable of doing backups. To guard against loss or corruption of this key, the key needs to be backed up independently of the main data backup.

For repositories using repokey encryption or authenticated mode the key is kept in the repository. A backup is thus not strictly needed, but guards against the repository becoming inaccessible if the key is corrupted or lost.

Note that the backup produced does not include the passphrase itself (i.e. the exported key stays encrypted). In order to regain access to a repository, one needs both the exported key and the original passphrase. Keep the exported key and the passphrase at safe places.

A repository may have more than one borg key (each protected by its own passphrase, see borg key add). Select which borg key to export with --label or --key (its key id or a unique prefix, see borg key list). If the repository has only a single borg key, no selector is required.

There are three backup formats. The normal backup format is suitable for digital storage as a file. The --paper backup format is optimized for printing and typing in while importing, with per line checks to reduce problems with manual input. The --qr-html creates a printable HTML template with a QR code and a copy of the --paper-formatted key.

OPTIONS

See borg-common(1) for common options of Borg commands.

  arguments

PATH
    where to store the backup

  options

--label LABEL
    export the borg key with this label

--key ID
    export the borg key with this id (or unique id prefix)

--paper
    Create an export suitable for printing and later type-in

--qr-html
    Create an HTML file suitable for printing and later type-in or QR scan

EXAMPLES

    borg key export > encrypted-key-backup
    borg key export --paper > encrypted-key-backup.txt
    borg key export --qr-html > encrypted-key-backup.html
    # Or pass the output file as an argument instead of redirecting stdout:
    borg key export encrypted-key-backup
    borg key export --paper encrypted-key-backup.txt
    borg key export --qr-html encrypted-key-backup.html

SEE ALSO

borg-common(1), borg-key-import(1)

Author
The Borg Collective