Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just completed backing up 8 years of my Gmail using

I selected the --encrypt option which uses Blowfish encryption. According to their site:

Emails can be encrypted with the option -e --encrypt. With that option, the Blowfish encryption is used to crypt your emails and chats and the first time you activate it, a secret key is randomly generated and stored in $HOME/.gmvault/token.sec. Keep great care of the secret key as if you loose or delete it your stored emails won't be readable anymore !!!

I'm using OSX Lion. I'm a software engineer but far from an encryption expert.

What should I do with this key? It seems like leaving it where it is now (alongside the emails) sort of misses the point of encrypting them to begin with.

share|improve this question
up vote 3 down vote accepted

Make three copies of it. Put one in your safe, one in your safety deposit box, and the other with someone you trust with your life.

share|improve this answer
Since I don't have a safe, I'm thinking I'll keep it in a "Secure Note" in my LastPass vault. I use a pass phrase and 2-factor (Google Authenticator) protection on that. Thoughts? – Encoderer Sep 6 '12 at 3:31
Sounds fine, provided you can trust Google. – Ignacio Vazquez-Abrams Sep 6 '12 at 5:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.