Download xbackupman.
One small binary. No runtime, no account, no server. Point it at your files or a database and it writes an encrypted archive to any local disk or S3-compatible bucket — the key never leaves your machine.
A single static binary. Nothing to install, no dependencies, no daemon.
AES-256-GCM streaming encryption with a passphrase you hold. We never see it.
Back up to an external drive, a NAS, or S3 / R2 / MinIO — same command.
xbm — command line · v0.1.0
Download the build for your platform. On macOS and Linux, mark it executable and drop it on your PATH.
Verify your download against SHA256SUMS.txt.
Sixty-second quickstart
Install (macOS / Linux)
# download, then:
chmod +x xbm-0.1.0-darwin-arm64
sudo mv xbm-0.1.0-darwin-arm64 /usr/local/bin/xbm
xbm versionBack up a folder to an external disk
export XBM_PASSWORD='a long passphrase you will remember'
xbm local backup ~/Documents ~/Projects --to /Volumes/Backup/Writes a single encrypted .xbm archive. Omit XBM_PASSWORD and it prompts you privately instead.
…or straight to S3 / R2 / MinIO
export XBM_S3_ENDPOINT=https://s3.us-east-1.amazonaws.com
export XBM_S3_ACCESS_KEY=AKIA... XBM_S3_SECRET_KEY=...
xbm local backup ~/Documents --to s3://my-bucket/laptop/documents.xbmRestore anywhere
xbm local restore /Volumes/Backup/Documents.xbm --into ~/restore
# same passphrase; a wrong one is rejected, tampering is detectedAutomate it (prints a cron / Task Scheduler entry)
xbm local schedule ~/Documents --to /Volumes/Backup/ --every dailyDesktop app
Prefer buttons to a terminal? The xbackupman desktop app wraps the same engine in a native window for Windows, macOS and Linux — pick folders, set a schedule, and watch backups run. It signs in to your account for cloud backups, or works entirely on-device.
Unsigned builds may warn on first launch — right-click → Open (macOS) or “More info → Run anyway” (Windows). Signed installers are on the way.
Servers & automation
The same xbm binary is also a client for your xbackupman account — drive databases, schedules and restores from CI or a server with an API key.
export XBM_API_KEY=xbm_xxxxxxxxxxxxxxxxxxxxxxxx
xbm sources # list your databases & servers
xbm backup connection <id> # trigger a cloud backupData behind a firewall the cloud can't reach? Enroll the server itself. The agent encrypts local backups with your org key and pushes them to your storage — they show up, verify and restore in the dashboard like any other backup.
xbm agent enroll --name db-server-1 # once, with XBM_API_KEY set
xbm agent backup /var/lib/pgsql --name nightly