Encrypted offsite backup for Restic, ZFS, and people who own their data

Backup that survives ransomware, drive failure, and a bad day in your data center.

Encrypted on your machine before it ever leaves. Stored in a private vault we physically cannot read. Full Restic compatibility, no egress fees, cancel anytime.

Start Free   Read the security model →

10 GB free · No credit card · Vault provisions in 60 seconds

Zero-knowledge
Your key only
ZFS-backed
No egress fees

Used by homelab operators, sysadmins, and developers who don't trust Big Tech with their data. Operational since 2026 · Stripe-secured billing · 7-day money back.

vault.servercrate.net:22372
Offsite
Repository
Encrypted
Integrity
ZFS Checksums
Plan
Standard
Status
● Protected
Storage usage173.31 GB / 500 GB
snapshot · /home /etc /var/lib/docker
today 02:00
Done
snapshot · /srv /opt /root
yesterday
Done
snapshot · configs + app data
2 days ago
Done
Offsite, encrypted, and outside your primary blast radius
How the encryption works

Your data is encrypted before
it ever leaves your machine.

Zero-knowledge isn't a feature we bolted on. It's how the product works at the protocol level. We literally cannot read your backups.

1
Restic encrypts on your machine
AES-256 encryption with your key. We never see, store, or transmit your encryption key. Period.
2
Encrypted blobs travel over SFTP
Standard, audited SFTP transport. Even in transit, all data is already encrypted ciphertext.
3
Stored in your private ZFS vault
Per-customer dataset with ZFS checksums. Hardware-isolated from other customers' data.
4
Only you can decrypt
Lose the key, lose the data - including from us. That's the tradeoff of real privacy.

If our infrastructure is compromised, attackers walk away with encrypted blobs they can't decrypt. If you lose your key, even we can't recover your data. That's the deal.

Read the full security model →
How It Works

Get protected in under 5 minutes.
No backup infrastructure to babysit.

Sign up, copy the connection string, point Restic at it, schedule it. That's the whole setup.

Start Free
01
Create your account
Sign up in under a minute. The free plan activates instantly. No credit card required to test the service or run your first real backup.
02
Your vault provisions automatically
You get a dedicated encrypted vault with a private SFTP endpoint, unique credentials, and a clean self-service portal. No support ticket just to get started.
03
Point Restic at it
Install Restic on Linux, macOS, Windows, or FreeBSD. Paste the connection string from your portal, initialize your repository, and push your first encrypted snapshot.
04
Schedule it and move on
Run it from cron or systemd. Backups stay deduplicated, encrypted, and offsite. Restore when you need to, without egress fees or restore penalties.
bash · restic backup to ServerCrate vault
# Paste your vault details from the ServerCrate portal
$ export RESTIC_REPOSITORY=sftp:vaultuser@vault.servercrate.net:22150:/data
$ export RESTIC_PASSWORD=your-secret-token
 
# Initialize repository
$ restic init
created restic repository a2f4e91c at sftp:vault.servercrate.net:22372:/data
 
# Run your first backup
$ restic backup /home /etc /var/www
Files: 14,832 new, 0 changed, 0 unmodified
snapshot a2f4e91c saved · 3.31 GiB in 24s ✓
$
Read the full setup guide →
Pricing

Flat. Predictable. No restore tax.

No egress fees, no per-API-call charges, no overage games. Start free, prove it works, then pay only for what you actually use.

7-day money-back guarantee on every paid plan. Cancel anytime from your portal.

Free
$0/mo
Test it with a real offsite vault
  • 10 GB encrypted storage
  • 1 device
  • 7-day snapshot history
  • Full Restic SFTP access
  • Portal dashboard
Start Free
Starter
$5/mo
Personal files, labs, small projects
  • 100 GB storage
  • 1 device
  • 30-day snapshot history
  • Client-side encryption
  • No egress fees
  • Cancel anytime
Get Starter
Most homelab users land here
Standard
$15/mo
Best fit for homelabs and dev stacks
  • 500 GB storage
  • 3 devices
  • 60-day snapshot history
  • Client-side encryption
  • No egress fees
  • Multi-device backup
  • Direct email support
Get Standard
Pro
$29/mo
Power users and small teams
  • 1 TB storage
  • 5 devices
  • 90-day snapshot history
  • Client-side encryption
  • No egress fees
  • Multi-device backup
  • Priority email response within 24h
Get Pro

Secure Stripe checkout. Upgrade, downgrade, or cancel anytime. 7-day money-back guarantee.
Need more storage or custom terms? Contact us.

Compare

Not all backup services
solve the same problem.

ServerCrate is built around private encrypted offsite backup with zero egress fees. Most alternatives give you pieces of that, not the whole thing.

This is our analysis based on each provider's public information. Pricing and features change - verify on each provider's site for current terms.

Feature ServerCrate Backblaze B2 BorgBase rsync.net
Zero-knowledge - provider can't read your files
Dedicated private vault per user
No egress / restore fees ever
Flat predictable monthly pricing
Free tier available
Native Restic SFTP support, first-classBorg-firstBorg + Restic
ZFS data integrity verificationNot specifiedOptional
Solo-operator support responseFounder respondsTier systemSmall teamSmall team
Compare vs BorgBase → Compare vs rsync.net →
Who uses this

Built for serious operators
who own their data.

Homelab operators
"My Proxmox cluster, my TrueNAS, my Docker stack - everything goes to ServerCrate. One credential. One target. Done."
Linux sysadmins
"I needed offsite Restic without rolling my own SFTP server in another region. ServerCrate is that, with ZFS underneath."
Privacy-first developers
"I won't put my files on Google or AWS. Encrypted client-side, stored offsite, no egress games. That's what I wanted."
The Portal

Everything you need.
Nothing in the way.

Clean self-service access to your vault details, storage status, snapshots, and account controls. No bloated backup panel. No ticket needed just to find basic info.

ServerCrate portal dashboard showing encrypted backup vault status, storage usage, active plan, and recent snapshots
ServerCrate My Vault page displaying SFTP host, port, vault user, Restic environment variables, and quick-connect commands
Your Vault, Your Details

Connection string, SFTP endpoint, Restic environment variables, and setup commands in one place. Fast to copy. Easy to verify.

ServerCrate sign up page for encrypted offsite backup with clean onboarding
Fast Onboarding

Sign up, verify your email, get your vault, and run your first offsite backup without building anything yourself first.

Start Free See Setup Guide
FAQ

Common questions.

ServerCrate is a private encrypted offsite backup service. You connect Restic to a dedicated vault over SFTP. Restic encrypts your files on your device before upload. ServerCrate handles the vault infrastructure, portal, and access layer so you get real offsite backup without running a remote storage stack yourself.
Your files are encrypted on your device using a key only you have before anything is sent to us. We store encrypted data only. We do not have your key, which means we cannot read your files, decrypt your backups, or hand readable data over to anyone else.
Setup takes about 5 minutes. Create your account, verify your email, get your vault details, install Restic, paste the connection string, run restic init, and then run your first backup. The setup guide walks you through it with exact commands.
Save it in a password manager immediately. If you lose your Restic password, your existing encrypted backups become inaccessible. That is the tradeoff of real zero-knowledge encryption: nobody can recover your data without the key, including us.
No. ServerCrate never charges egress or restore fees. You pay a flat monthly price and can restore your data when you need it without bandwidth penalties or surprise charges.
Restic runs on Linux, macOS, Windows, and FreeBSD. You can back up servers, laptops, desktops, Raspberry Pi, NAS devices, VPS instances, and homelab gear. Device limits depend on your plan.
Monthly billing through Stripe. Upgrade, downgrade, or cancel anytime from your portal. Paid plans include a 7-day money-back guarantee. No long-term contract required.
Your repository is plain Restic format on standard SFTP. You can mount it on any other SFTP server (rsync.net, BorgBase, your own VPS) and continue using Restic against it without re-encrypting or migrating. There is no proprietary format and no lock-in.
Your encrypted vault lives on ZFS storage in our infrastructure. We can provide specific infrastructure and jurisdictional details on request for compliance reviews - see our security page for the public summary.
Even in a worst-case breach, attackers receive ciphertext, not your files - that is why the architecture is zero-knowledge. We commit to publishing security incidents within 72 hours and emailing affected customers directly. Our full security posture is documented at /security/.

More questions? Email hello@servercrate.net - a real person responds.

Guides & comparisons

Learn more.

Restic
Server & Linux
Homelab & NAS
Compare & setup
Stop hoping. Start backing up.

Your data won't
back itself up.

Private. Encrypted. Offsite. Restic-native. Free to start.
Stop gambling on a single failure domain.

Start Free

10 GB free, no card · Stripe-secured billing · No egress fees · Cancel anytime · 7-day money back