AgentBak backs up your AI agent identity — memories, skills, secrets — with AES-256-GCM encryption. Zero-knowledge cloud. One command.
Your agent's memory, skills, and config represent months of work. Generic backup tools weren't designed for this.
Every backup is encrypted with AES-256-GCM before leaving your machine. The key is derived using Argon2id — the PHC winner, memory-hard, GPU-resistant. Your passphrase never touches the server.
AES-256-GCM + Argon2idAgentBak's servers store encrypted blobs. We cannot read your agent's memories, your API keys, or your SOUL.md — even under subpoena. Mathematically impossible.
Client-side encryption
vault push uploads your encrypted workspace. On a new machine, vault pull && vault restore brings everything back. Agent picks up exactly where it left off.
Backs up what makes your agent yours: SOUL.md, MEMORY.md, skills/, secrets. Automatically excludes 40GB of model weights that you can re-download.
The .vault format is self-describing: JSON header + AES-GCM ciphertext. Spec is public. Decrypt it in 2041 with any standard crypto library. No vendor lock-in.
Generate offline recovery codes at backup time. Forget your passphrase? Your data isn't gone. Print them, store them in a safe — they're your insurance policy. 10 codes × 24 words each.
Coming in v0.2
npm install -g @agentbak/vault then vault init. Takes 30 seconds. Sets up your account and passphrase. Recovery codes generated.
Run vault backup from your workspace. Files are packed, compressed, encrypted client-side, and uploaded. The server receives an opaque blob. Typical workspace: 3–8 MB encrypted.
New machine? SSD failure? Run vault pull then vault restore. Your agent's full identity — memories, skills, config — restored in under 60 seconds.
The CLI is free forever. Pay only for managed cloud storage and history.
vault push / vault pullAll paid plans include a 14-day free trial. No credit card required. Need enterprise? Contact us.