This add-on is beta software. Keep another verified backup of important sites. Test both restore and clone before relying on it as the only recovery method.

Restoring over an existing site replaces backed-up site files and imports the backed-up database. Stop other work on that site before starting a restore.

• Use a dedicated Nextcloud app password, never the account password.
• Revoke the app password in Nextcloud if a computer is lost or compromised.
• The app password and recovery passphrase are encrypted locally through Electron safeStorage.
• The restic repository password is generated randomly for each Local site and stored encrypted locally.
• A portable recovery manifest containing the repository password is encrypted with AES-256-GCM. Its key is derived from the recovery passphrase with scrypt.
• The recovery passphrase must be at least 12 characters and should be long, unique, and stored in a password manager.
• The recovery passphrase cannot be recovered by the add-on.

The add-on requires HTTPS for remote Nextcloud servers. Plain HTTP is accepted only for localhost and 127.0.0.1.

TLS certificates are validated by the operating system/runtime. Self-signed certificates must be trusted by the operating system; certificate validation is not disabled by this add-on.

Do not open a public issue containing credentials, recovery manifests, logs with secrets, or a downloadable backup repository.

Until a dedicated private security contact is configured for the public repository, create a minimal public issue asking the maintainer for a private reporting channel. Include no exploit details or secrets in that issue.