Bring Your Own Storage (BYOS) lets you mirror every PowerSEC cloud backup into a storage bucket you own and control — on top of the PowerSEC-managed copy. This gives you true 3-2-1 redundancy: the same backup lives in PowerSEC's managed storage and in your own account, so losing one never loses the backup.
Who can use it
BYOS is included on paid cloud-backup plans (Backup Only, Pro Protection, Pro + Backup Plus, Agency). It is not available on the Free plan (Free is local-only backups). There is no extra charge for BYOS, and your BYO bucket's bytes do not count against your PowerSEC storage quota — you pay your storage provider directly for what you use there.
Each plan allows a number of BYO destinations per site (Pro Protection: 3, Pro + Backup Plus: 5, Agency: 10).
Supported providers (v1)
Any S3-compatible object storage works:
- Backblaze B2 (S3-compatible endpoint)
- Cloudflare R2
- Wasabi
- Amazon S3
- DigitalOcean Spaces
- MinIO (self-hosted)
(Google Drive is planned for a future release.)
How to add a destination
- Open Dashboard → Sites → (your site) → Backups → Storage destinations.
- Click Add destination and pick your provider preset (it fills in the endpoint style for you).
- Enter your bucket, region, access key, and secret key. An optional prefix scopes PowerSEC's objects into a folder inside your bucket.
- Click Test connection — PowerSEC writes, reads, and deletes a tiny probe object to confirm the credentials and permissions work.
- Click Activate. You must accept the consent terms (you confirm you own the bucket and authorize PowerSEC to write backup objects to it).
Your secret key is encrypted at rest with a dedicated key and is never shown back to you after saving.
What happens after activation
Every new cloud backup is mirrored in parallel to your active BYO destinations after the PowerSEC-managed copy is verified. Each copy is checksum-verified independently. The PowerSEC-managed copy stays authoritative — if a mirror to your bucket fails, your backup remains stored in managed cloud storage and the mirror is retried.
Restore redundancy
If the PowerSEC-managed copy of a backup is ever unavailable, PowerSEC will automatically fall back to restoring from your checksum-verified BYO copy — no manual steps needed.
Retention: who deletes your objects
By default, PowerSEC never deletes objects from your bucket (keep all) — even when a restore point rotates out of your plan's retention window, the copy in your own bucket stays until you remove it. If you would rather PowerSEC keep your bucket tidy in lockstep with your plan's retention, you can opt in to PowerSEC-managed retention per destination (a separate, explicit consent). PowerSEC will never physically delete from your bucket unless you have turned that on.
BYO restore points still count toward your plan's restore-point limit (they are the same logical backups), but the bytes in your own bucket are excluded from your PowerSEC storage quota.
Disabling or removing a destination
- Disable pauses mirroring to that destination but leaves existing objects in place.
- Remove stops mirroring and removes the destination from PowerSEC; it does not delete objects already in your bucket (you manage those).