SpiderOak One Backup Review
Views: 3340
2023-09-07 23:51
Editors' Note: According to its developer, "SpiderOak One Backup has been publicly in maintenance mode

Editors' Note: According to its developer, "SpiderOak One Backup has been publicly in maintenance mode since March 2020. There will be no new updates with improvements or new options for now, but it continues working and we continue providing support."

Backing up your data is important, but you might hesitate to use an online backup service out of concern that the company housing your information would have access to your personal files. If you're security-conscious in this way, consider the privacy-focused SpiderOak One Backup. It has a no-knowledge policy and unlimited versioning capabilities. The service charges more for online storage than competitors, though it lets you back up an unlimited number of devices with a single account. The big downsides are that SpiderOak One Backup is no longer being actively developed, it offers no mobile apps, and it does not support multi-factor authentication. Our Editors' Choice winners among backup services are IDrive for online backup and ShadowProtect SPX Desktop for local backup.

How Much Does SpiderOak One Backup Cost?

SpiderOak One Backup is free to try for 21 days, and we appreciate that the trial doesn't require entering any credit card information. If you choose to become a subscriber, be sure to consider both the yearly monthly and yearly plans, as the options vary widely.

The prices are summarized below. Although the prices look high, all the SpiderOak One plans let you back up as many devices as you want, whereas other services usually put tight limits on their least expensive plans. SpiderOak One does not have "unlimited" storage like some competitors (including Carbonite and Backblaze) do, but so-called unlimited plans usually enforce limits if you use the service beyond a "reasonable" amount. For example, if a service is intended for personal use but is clearly being used to operate a large business, the user may be found in violation of the terms.

Additionally, SpiderOak One Backup lets you back up external hard drives, removable devices, and network volumes. Other services, such as Carbonite Safe, charge extra for these capabilities.

If you pay monthly for SpiderOak One Backup, your options are listed below:

If you pay annually, you have more options for how much storage you can get; specifically, you can get a smaller amount at a very fair cost:

How Do SpiderOak One's Prices Compare?

SpiderOak One's prices are on the higher end, but again there's no limit on how many devices you can back up, and you get better privacy protections. The best price-per-GB is IDrive. Its $79.50-per-year Personal plan offers 5TB of online storage for an unlimited number of devices. Backblaze charges $70 per year for its unlimited storage plan, but it limits you to backing up one computer.

SpiderOak One Backup does not offer backup or restore options via postal mail, where the company sends you a hard drive with your data on it—Backblaze, Carbonite, and IDrive all do. That option is useful in the case of accidental data loss or simply if you want to perform bulk file transfers without worrying about the security issues related to doing it over the internet.

(Credit: SpiderOak/PCMag)

SpiderOak One Backup has desktop apps for Windows, macOS, and 64-bit versions of Linux, such as Fedora and Ubuntu. It no longer offers apps for Android or iOS, however. The mobile apps were only ever read-only, meaning you could view files from your saved data sets, but not back up data from your phone. Other services, including IDrive, allow you to back up several types of data from your mobile device.

Getting Started With SpiderOak One Backup

SpiderOak One Backup's account setup process is simple. All you need do is download the desktop app and provide a username and password, which are used to encrypt your backups, as we explain in the next section. The apps for Windows, macOS, and Linux are key to SpiderOak's service since they are the only way to upload files. It is worth noting that, to update the software, you need to download the latest release from the SpiderOak website. The company explains, "Our challenge, which we have not yet solved, is to devise a system in which we can push out authentic updates yet be technically and legally infeasible for an overzealous authority to compel us to push out an update containing a deliberate weakness." The security-conscious crowd might appreciate this policy, but others may find it inconvenient.

Although the installation process is simple, SpiderOak One Backup does not guide you through the initial backup setup with a wizard. For experienced users, that's fine, because it's easy to find everything you need. The interface is straightforward if you understand some basic computer terminology. For newcomers, SpiderOak may be a bit overwhelming because you don't know if the selections you're making for which files and folders to backup will be sufficient should you ever have to restore your machine. Other services are more helpful in this regard. That said, SpiderOak's Help resources cover topics in detail. The link to those resources is in the lower-right corner of the desktop app.

Security and Privacy With SpiderOak One Backup

SpiderOak One Backup's strength is its security practices. Its no-knowledge policy states that it has absolutely no way to access or view any of your files. In practice, this means that all traffic to and from the SpiderOak servers is encrypted via TLS/SSL and protected by certificate pinning (a method of preventing man-in-middle-attacks). In other words, no one else can see or access the contents of your files.

As mentioned, SpiderOak encrypts your backup set with your account password. It hashes your password with salted PBKDF2, a key derivation function used to prevent brute force or rainbow table attacks. SpiderOak says its encryption approach uses a combination of 2048-bit RSA and 256-bit AES. All those measures help keep your data private. It also means that no one at SpiderOak can help you reset your account password if you forget it.

This setup is slightly different from what other online backup services use. IDrive and Acronis Cyber Protect Home, for example, allow you to set private encryption keys that are separate from the account password. The companies still can't help you recover your data if you lose your key, but they can, at least, reset your account password.

SpiderOak One Backup deserves bonus points for transparency in its support documents and throughout the user experience. For instance, when you log into your account on the web, the site informs you in straightforward language what privacy you may be giving up as an unavoidable result of using that platform. The warning ends with the explanation that the no-knowledge policy only fully applies to the desktop application. The web interface does not support multi-factor authentication, which is another reason you might decide not to use it. As of this writing, the feature is listed as "in beta," and it's been that way for a few years. Many other online backup services, including IDrive, Backblaze, and OpenDrive, support this security feature.

What Is Two-Factor Authentication?

SpiderOak's privacy policy states that it collects three types of information: account information (username and passphrase), billing information, and device information (operating system, approximate amount of data stored on its service, IP address, any system error messages, and the date and time of each request). The company says it uses this data internally to maintain, improve, and customize the service. We appreciate SpiderOak's statement that it "never sells your information or shares it with third-party advertisers," which is what we like to hear. Note that SpiderOak says it will disclose information "if we believe it is reasonably necessary to comply with a law, regulation, or valid legal process," but that's standard practice. SpiderOak is based in the US, in Missouri.

Desktop Interface

SpiderOak One Backup's desktop app has a straightforward design and a clean blue, white, and gray color scheme. The app smartly divides its many features across five main tabs: Dashboard, Backup, Manage, Sync, and Share. From the Dashboard, you can see all the devices you've connected to OneBackup, and a center module shows the status of running Backup, Sync, and Share processes. A persistent storage bar at the bottom of the interface indicates how much space you have left on your account. A blue Run Now button in the corner makes it easy to start your backup from anywhere in the interface.

(Credit: SpiderOak/PCMag)

Tabbing to the Backup section shows suggestions for content that you might like to back up. Choices include Desktop, Documents, Favorites, Movies, Music, and Pictures. Note that these options refer only to the folder name itself. For example, selecting Music backs up your Music folder, not all the audio files on your machine.

The center of the Backup tab lets you view the folder tree of files selected for backup and add anything to that list. Unfortunately, there isn't a disk image backup option. Acronis and IDrive both offer easy ways to back up an entire hard drive.

You can download items from the Manage tab as well as access the file history (or versions) of items in your storage backup set. The Sync tab lets you view the status of the SpiderOak Hive, a shared folder for syncing files across devices. Alternatively, you can specify two other folders on your hard drive that you would like to remain in sync with each other. Share is the last option, in which you set up ShareRooms. We'll go into more detail on these last two sections later in this review.

Scheduling Backups With SpiderOak

SpiderOak One Backup lets you customize your backup schedule via the Preferences menu. With the default option, Automatic, SpiderOak continuously watches your system for any changes to files—a strategy we emphatically endorse. Alternatively, it can back up files on timed intervals (every five minutes is the minimum), or at a specified time or day of the week. You can also independently schedule syncing and updates of ShareRooms.

Another option lets you include or exclude files of varying types and sizes from your backup. For example, you can exclude files that are larger than 1GB, use certain keywords in their filenames, or are older than a defined age. These options are excellent for power users.

(Credit: SpiderOak/PCMag)

SpiderOak One Backup doesn't re-upload an entire file every time one little thing changes. Instead, it scans your files, finds the modified parts, and uploads the new data. As a result, it can store historical versions of your files, while minimizing the amount of space and bandwidth required. The service also de-duplicates information and condenses your files to maximize your space.

We like the convenience of right-clicking on any file or folder in Windows' File Explorer (the same function is not supported on macOS or Linux) to quickly back it up. If a file is already backed up, SpiderOak One Backup offers a few more options, such as Make Shared File Link and Show Versions. Carbonite Safe offers a similar feature. If you don't want to see SpiderOak One Backup options in File Explorer's context menus, you can turn off this option in Settings under Enable OS Integration.

Syncing and Sharing With SpiderOak

SpiderOak One Backup includes a syncing service called Hive. When you set up an account, you automatically get a folder on your machine called SpiderOak Hive, which works like a Dropbox folder. It syncs any files you add to it to other places where you have SpiderOak One Backup installed. Livedrive offers similar folder-syncing capabilities.

Sharing files and folders in SpiderOak One Backup uses a slightly convoluted but very flexible system called ShareRooms. Tap the Share tab to get started. SpiderOak first requires you to create a ShareID, which is a public username that helps people identify you when you share files with them. SpiderOak recommends that you choose a different name than your account username. Then, the app walks you through a few text fields in which you name your room, provide a description, and optionally lock it with a password. Keep in mind that to share any folder, it must already be a part of your backup set.

You can add an optional description of the room, which might be instructions or other information for your collaborators. The process feels slightly backward since you don't actually select folders to share until near the end of the process. The last step is to verify all the information and enable sharing.

(Credit: SpiderOak/PCMag)

Once you set up a ShareRoom, you have to send the details to your collaborators, but there isn't a built-in option on the desktop for taking this action, although the Share section on the web has an email option. Your friends and collaborators can only get to a ShareRoom through a unique URL or by logging into the SpiderOak website using a ShareID and RoomKey that you generate. Everyone with access can add new files and edit existing ones, and all the changes are automatically viewable to everyone else.

When you share files, SpiderOak explains that doing so breaks some aspects of the no-knowledge pact, but it's your choice to do so. All your other data remains private and SpiderOak still has no way to view it.

You can bypass all these steps by entering the Manage tab, selecting a file, and clicking the Link button. Alternatively, you can create a share link by right-clicking on a file in Explorer and selecting Share, Make Shared File Link, Make Share Link and Copy to Clipboard, or Make Share Link and Create Email. None of these latter options, however, can be set up with a password and the link only remains active for three days. Stick with ShareRooms if you want the most protection for your shared content.

Restoring Files With SpiderOak

Advanced users who want a lot of control over backed-up files will appreciate the way SpiderOak One Backup handles file restores. From the Manage tab in the desktop client, you can download any selected folder or file. If you want to restore a huge batch of files at once, you can pick the highest parent file or drive in the directory. The Manage tab also conveniently lets you remove items from your backup. Note that you can only remove items from your backup from the computer you originally backed them up from. SpiderOak says this policy is to prevent someone from deleting everything who gains access to your account via the web portal.

By default, SpiderOak One Backup saves an unlimited number of versions of each file it backs up, which is ideal. IDrive keeps only the past 30 versions of each file, though it does so indefinitely. SpiderOak One Backup supports point-in-time recovery—albeit via the command line or Terminal—so you should never lose access to a file you may have accidentally deleted locally.

To see all saved versions of a file, highlight it in the Manage tab. The History panel appears on the right. It places the newest version at the top, but you can select any previous version and tap the Download button to get it back. SpiderOak One Backup successfully saved each version of a file we changed several times.

Not 'No Knowledge' With the Web Client

SpiderOak One Backup's web interface is extremely limited compared with those of competitors, and it's even hard to find on the site. The service clearly informs you that using the web portal breaks the no-knowledge pact. It's a trade-off. You can have some of the convenience of a web app, where you can quickly and easily retrieve or restore your files, or you can have guaranteed no-knowledge privacy. In fact, the mere existence of web access to your files could be considered a vulnerability, some online backup services require the locally installed application to privately unencrypt your files. You don't have to use the web app unless you suffer a computer loss for which the only way to get back your files is through the web app.

The web app doesn't seem like it's built for regular usage, the way, say, Dropbox's website is. Rather, SpiderOak One Backup is far less functional when you use it in a web browser compared with the desktop app.

(Credit: SpiderOak/PCMag)

From the web interface, you can access four sections: Hive, Manage, Share, and Account. Hive lets you view and download any of the files stored in the Hive folder, but you can't upload anything to this folder from the web. The Manage section lets you view available folders that you've backed up, preview images, and download files, as well as deauthorize any computers you have linked to your account. There's no search feature here, so you'd better know where your relevant files live. The Share section enables you to view all your ShareRooms and download files from them, but you can't initiate a share from the web. From Account, you can update your email address, password, and change your subscription plan, including canceling it.

Making the security concerns even greater is the fact that there's no multi-factor authentication option. The lack of multi-factor authentication is disappointing and curious for a company that caters to the privacy- and security-conscious crowd.

How Fast Is SpiderOak One Backup?

In our most recent testing of the service, SpiderOak One Backup took slightly longer than average to complete an upload test, though it wasn't the slowest. Speed matters most when you are backing up your PC for the first time or when restoring your system, but it's not very important day to day. Faster backup speeds merely make the process more convenient. A SpiderOak representative noted that the service optimizes for security and privacy more than upload speed, which is one potential explanation for its below-average results.

Privacy, But Not Much Else

As noted, SpiderOak One Backup is no longer being actively developed, which should be a big caveat before you decide to sign up for it. That said, it takes privacy seriously, and if that's your primary concern in a backup tool, it's an option. It doesn't support multi-factor authentication, however, which detracts from the privacy and security story. SpiderOak's online storage prices are higher than competitors, but every plan supports an unlimited number of devices and enables you to save an unlimited number of file versions. Ultimately, IDrive and Acronis True Image are our Editors' Choice winners for the backup category—IDrive's plans are an excellent value and Acronis' security and backup features are impressive.

If you don't feel comfortable storing your data online, take a look at our roundups of the best local backup software and external hard drives.

Tags online cloud backup services