Time Machine is fading. Your backups shouldn't.

Encrypted Mac backups
you can browse in any tab.

Versioned, deduplicated snapshots sealed on your Mac before they ever leave. Restore from the menu bar, the CLI, or a browser — decryption happens client-side, every time.

macback
$ restorekit backup
Backed up ~/Documents/cotizaciones: snapshot 4bd3159d (10 files changed, 0 unchanged, 1 pack)
$ restorekit snapshots
4bd3159d  2026-05-28 05:48  ~/Documents/cotizaciones
$ restorekit restore latest --target ~/restored
Restored snapshot 4bd3159d ✓ verified

In any browser

Decryption that runs in your tab — not on our servers.

A WebAssembly build of the same Rust engine your Mac runs ships into your browser, derives the key with Argon2id locally, and verifies every chunk with BLAKE3. The server fetches ciphertext on demand and never sees a single byte of plaintext.

  • One Rust implementation. Same code on your Mac, your menu bar app, and the tab.
  • Walk the tree lazily. A 131 GB / 2.25M file backup renders in milliseconds — only the path you open is decrypted.
  • Preview + bulk-ZIP download. Images, PDFs, code, JSON — streamed through client-zip, chunk-by-chunk.
Create your account
restorekit.app/browse
Stored
5.6 MB
Snapshots
1
Packs
1
Decrypted locally · BLAKE3 verified · 0 bytes plaintext to server
Second backup of the same directory
3 KB

BLAKE3 + content-defined chunking dedupes everything that hasn't changed. The first backup is the only big one.

Plaintext bytes the server ever sees
0

Per-blob XChaCha20-Poly1305, sealed on your Mac. A breach of our infrastructure leaks ciphertext, sizes, and access times — nothing more.

WASM engine bundle
300 KB

The same Rust crate the daemon uses, compiled for the browser. Loads on demand so marketing pages stay light.

Your keys. Your data.
Nobody else's.

A passphrase derives your key with Argon2id; a random master key encrypts every chunk with a fresh nonce. The cloud holds only opaque, authenticated ciphertext.

Zero-knowledge isn't a slogan — it's why the /browse page still works without a server-side key.

  • XChaCha20-Poly1305 per-chunk, sealed before upload
  • Argon2id passphrase, key in your macOS Keychain
  • BLAKE3 content addressing — verified on every read

Stop renting your own files back from Apple.

Create your account and have a Mac backing up in under a minute.