Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I just completed backing up 8 years of my Gmail using http://gmvault.org

I selected the --encrypt option which uses Blowfish encryption. According to their site:

Emails can be encrypted with the option -e --encrypt. With that option, the Blowfish encryption is used to crypt your emails and chats and the first time you activate it, a secret key is randomly generated and stored in $HOME/.gmvault/token.sec. Keep great care of the secret key as if you loose or delete it your stored emails won't be readable anymore !!!

I'm using OSX Lion. I'm a software engineer but far from an encryption expert.

What should I do with this key? It seems like leaving it where it is now (alongside the emails) sort of misses the point of encrypting them to begin with.

share|improve this question

1 Answer 1

up vote 3 down vote accepted

Make three copies of it. Put one in your safe, one in your safety deposit box, and the other with someone you trust with your life.

share|improve this answer
Since I don't have a safe, I'm thinking I'll keep it in a "Secure Note" in my LastPass vault. I use a pass phrase and 2-factor (Google Authenticator) protection on that. Thoughts? –  Encoderer Sep 6 '12 at 3:31
Sounds fine, provided you can trust Google. –  Ignacio Vazquez-Abrams Sep 6 '12 at 5:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.