Backups and restore

Backups are encrypted with AES-256-GCM using a key derived from your passphrase. They run automatically once a passphrase is set — nothing runs before that.

What runs on its own

• A local backup on a schedule you choose, and one when you close the application.
• A copy to a second folder — a pen drive or a share on your own network — if you set one.
• A weekly check that decrypts the newest backup and verifies it, so a corrupt file is found on a quiet day.

Off-site without the internet

Setting a copy folder to a pen drive is the whole off-site story for a shop with no connection: the same encrypted file, somewhere that is not the disk about to fail. If the drive is unplugged the local backup still succeeds and only the copy is skipped.

Restoring

Choose a backup and confirm. The restore is staged and applied the next time the application starts — the only safe moment, when nothing has the database open. Your previous database is kept alongside rather than overwritten.