Last reviewed, May 2026
Kopia is a solid backup client. The Kopia Repository Server, though, is something you host yourself - hardware, updates, TLS, monitoring, the whole stack. ServerCrate is a fully managed alternative for encrypted offsite backup, optimized for Restic but equally usable with Kopia.
Kopia has two sides: the backup client (free, open source), and the Kopia Repository Server - a self-hosted component that acts as a gatekeeper between clients and underlying storage. You run the server, maintain it, issue client credentials, handle TLS, back up the server itself, and hope nothing breaks.
For a homelab or developer with three machines, this is a lot of operational overhead. The repository server is a useful component in multi-tenant corporate deployments. For personal or small-team backups, it is often overkill.
A managed encrypted backup target removes the server operation entirely. You run the backup client. The target is a hosted Restic REST endpoint, backed by ZFS, with encryption handled entirely at the client level. No Kopia Repository Server to run.
ServerCrate is this kind of managed target. It is built for Restic - you point the Restic CLI at your vault and back up:
export RESTIC_REPOSITORY=rest:https://vaultuser:YOUR_TOKEN@a1b2c3d4.vault.servercrate.net/
export RESTIC_PASSWORD=your-restic-password
restic init
Your Restic repository lives inside your ServerCrate vault. You get a managed, ZFS-backed target without running any backup server yourself.
The honest comparison:
| Dimension | Kopia Repository Server (self-hosted) | ServerCrate (managed) |
|---|---|---|
| Who runs the server | You | ServerCrate |
| Encryption | Client-side (Kopia encrypts) | Client-side (Restic or Kopia encrypts) |
| Zero-knowledge | Yes, by design | Yes, by design |
| Storage layer | Whatever you put under it | ZFS on dedicated nodes |
| Hardware you own | Yes | No |
| Monthly cost | Your hosting bill + electricity + time | From $5/mo |
| TLS / certs | You manage | Managed TLS at the edge, including post-quantum |
| Backup of the backup server | Your problem | Not applicable |
| Snapshots and history | Kopia handles | Restic or Kopia handles (plus ZFS snapshots on the server) |
| GUI | Kopia UI | Web portal for vault management; backup client chooses GUI or CLI |
| Supports Restic clients too | No (Kopia format is Kopia-only) | Yes (Restic-native) |
For those cases, the self-hosted path is correct. For everything else, a managed target is simpler, cheaper, and more reliable.
ServerCrate hosts Restic repositories over Restic's native REST protocol. Kopia cannot use a Restic REST server as a backend, so to use ServerCrate you run Restic - which gives you the same encrypted, deduplicated, snapshot-based model you were evaluating Kopia for. Setup is three lines:
# Point Restic at your vault (values from the portal)
export RESTIC_REPOSITORY=rest:https://vaultuser:YOUR_TOKEN@a1b2c3d4.vault.servercrate.net/
export RESTIC_PASSWORD=your-restic-password
# Initialize, then back up
restic init
restic backup /home /etc /var/www
Your Restic repository lives in your vault on ZFS-backed storage. If you are committed to Kopia specifically, generic object storage or a self-hosted Kopia Repository Server is the right path - ServerCrate is a Restic target.
Honestly, very little for typical use cases. You do not have root on the storage host, so you cannot install arbitrary things there - but a backup target is not somewhere you want to run arbitrary things anyway. The smaller surface area is a feature.
Kopia's server-side access control (ACLs on specific paths within a repository) is a Kopia Repository Server feature. ServerCrate vaults do not offer path-level ACLs; access is at the vault boundary. For single-user or single-team vaults, this is not a limitation.
If you are running your own Kopia server and want to move:
Kopia does not have a native repository-to-repository migration tool. The practical approach is fresh snapshots on the new repository and retiring the old one once confidence is built.
Most people evaluating Kopia arrive there because they want encrypted, deduplicated, snapshot-based backup and Kopia is one of the three or four tools that does it well. If you are flexible on the client tool, Restic is slightly simpler operationally, has a larger community, and is what ServerCrate is primarily designed around. See our comparison of Restic alternatives for the full landscape.
If you decide Kopia is the right tool, here is what you're actually getting that Restic doesn't match:
And here is where Restic wins:
restic backup restic restore restic forget. That's almost the whole surface area.If you're backing up a large PostgreSQL or MySQL database, both Restic and Kopia will back up files correctly but neither handles live database state - you still need to pg_dump or use filesystem snapshots first. For VMware ESXi or Proxmox VMs with live guests, you likely want Proxmox Backup Server or Veeam for the hypervisor layer and Restic/Kopia only for the config and extracted data. Pick the backup tool that matches the data model, not the other way around.
/data/restic /data/kopia) and they will not interfere. Each gets its own encryption key and deduplication scope. Storage usage is additive - there is no cross-tool dedup.Skip the server ops. Get a private Restic vault backed by ZFS, over a managed REST endpoint. 10GB free to try.
Cancel anytime. 10 GB free tier never expires. No egress fees.
10 GB. No credit card. Setup in 5 minutes. Card, PayPal, or Bitcoin when you upgrade.
Start free vault →