age encryption
Also called: age, file encryption, backup encryption
age is a simple modern file-encryption tool, commonly used to encrypt backups on the device so the storage provider only ever holds ciphertext.
age (“actually good encryption”) is a file encryption format and tool designed as a smaller, harder-to-misuse replacement for GnuPG. It offers one modern cipher suite and no configuration surface, which removes most of the ways encryption gets used wrongly.
For backups it enables client-side encryption: files are encrypted on the device before upload, so the storage provider holds only ciphertext. Whoever operates the bucket cannot read your data, which turns “trust the provider” into “trust the maths”.
The operational catch is real. If the key is lost the backups are unrecoverable — there is no reset. Any system doing this must make key custody explicit at setup rather than burying it.