This release is a canary release intended to be used for testing.

Changes in this versions

This release makes the S3 providers simpler to use by providing fewer options, and only showing relevant endpoints.

The release also adds support for excluding files based on extended attributes on Linux and MacOS, and adds support for supplementary access groups on Linux.

For Windows, the installer now supportsNOSCRIPT=true which will prevent the installer from running scripts that start/stop the Windows service.

It is now also possible to change the encryption passphrase for a backup, using the RecoveryTool.

Change to default database encryption

This release now has a "default secret provider" for the current OS.
The mapping is:

• Windows: Windows Credential Manager
• MacOS: Keychain
• Linux: libSecret (Gnome Keyring), or commandlinepass if available

If no secret provider is given, the default secret provider for the current OS will be used.
The secret provider is then used to store secrets, inclduing the encryption password for the database and the password for the server, if using the TrayIcon to connect to the server.

Warning: This change will cause thedatabase to be encrypted with a random password, and the password will be stored in the default secret provider for the current OS.

If you rely on getting the database contents for something, you need to ensure you also have a copy of the random password.

If you want to opt-out of this change, you can use the--disable-db-encryption option when starting the Server/TrayIcon.
If you already have an encryption password set, this change will not affect you.

If you are already using database encryption, and want to switch to the new managed way of storing the encryption password, you need to:

• Stop the server/TrayIcon
• Start the server/TrayIcon with the--disable-db-encryption option to remove the database encryption
• Remove the--disable-db-encryption option
• Remove the--webservice-password option or environment variable
• Start the server/TrayIcon again

Detailed list of changes:

• Added Rabata.io to list of support S3 providers
• Added support for supplementary access groups on Linux
• Added support for excluding files based on extended attributes (MacOS / Linux)
• Added support for providing a URL for the servername for S3
• Added a whitelist of public S3 providers, and include hostname in backup reports if the hostname is in the whitelist
• Updated SSH.NET to latest version (2025.1.0)
• Fixed an issue with startup delay not working correctly
• Fixed a timeout issue with AliyunOSS
• Updated RecoveryTool to also allow changing a backup's encryption password, thansk@greyxr
• Added support for providing the target URL and encryption passphrase in ServerUtil when importing a configuration
• Fixed a warning on Windows with the EventLog commandline argument type
• Updated MSI installer to supportNOSCRIPT=true which will prevent the installer from running scripts that start/stop the Windows service
• Updated MSI installer to ignore errors when stopping the service
• Added a guard code to check that the database is in a good state before attempting removal
• Added support for writing secrets with the secret providers and the secret tool
• Added a dialog to TrayIcon that asks for the password to the server, if not using a hosted server instance
• Added support for saving the TrayIcon password in the default secret provider for the current OS
• Added automatic encryption of the Server database, using the default secret provider for the current OS, if possible
• Added support for getting an authentication token for Filen.io when using MFA
• Automatically runVACUUM on the database if the encryption settings are changed, so existing data is scrubbed
• Added a Duplicati Storage backend that supports the Duplicati Storage service

ngclient changes:

• Fixed an issue with loading Chinese language
• Added support for custom bucket validation rules on B2 buckets
• Added support for hiding the console connection indicator
• Merged settings for remote control on the settings page
• Fixed an issue with some default empty url not working on the destination page
• Fixed supporting Storj Access Grant & Storj API key
• More accurate display of destination type on the overview page
• Added custom UIs for supported S3 providers
• Added improved field validation for providers
• Updated the "Direct restore" flow to use the same destination picker as when setting up a backup
• Added some functionality to swap UI and choose the default UI (ngax vs ngclient)
• Fixed startup delay settings not being saved
• Fixed an issue with the data not being selectable in a custom schedule
• Fixed back button not working on Schedule page
• Now pushing serversettings via websocket instead of polling
• Added a button for getting API token for Filen.io when using MFA
• Allow finding deprecated backends by typing their full protocol key
• Added support for Duplicati storage backend

Contributors

This is a beta release that primarily solves an issue with the new restore method, which could use up a significant amout of storage.

With this release, the option--restore-cache-max is added, which allows you to limit the amount of storage used during the restore process.

A few minor fixes are also included, which are detailed below.

Changes from 2.2.0.1 to 2.2.0.2

• ServerUtil returns the backup status when waiting for completion, thanks@greyxr
• Updated the Uplink.NET library to latest version (for Storj)
• Disabled the built-in retry and timeout for Azure blob storage
• Updated localizations
• Added Rabata.io as an S3 provider
• Added support for supplementary groups for service on Linux
• Added support for limiting the restore process disk usage

Changes in user interface from 2.2.0.1 to 2.2.0.2

• Updated to latest ShipUI
• Preload modules for better desktop performance
• Fixed some issues with localization not being applied
• Updates to the options list
• Updated localizations, thanks to all translators!
• Fixed an issue with Rclone not maintaining letter-case for remote
• Simplified the schedule setup page
• Improved AuthID picking
• Improved integration with console
• Cleaned the sidebar slightly
• Fixed an issue with styling in settings
• Restore flow will now default to not overwrite existing files
• Added both option name and short description to advanced options
• Fixed not showing "Verifying" at the start of the backup operation
• Handle global settings with and without-- prefix
• Upgraded to Angular 21
• Fixed loading Chinese language
• Added different validation for B2 bucket names
• Added support for hiding the console connection indicator

Contributors

This release is a canary release intended to be used for testing.

Changes in this versions

This version now runs on .NET10! Apart from some speedup, the transition should not be noticeable.

This version also adds initial support for MacOS Photos, where it can now read photos, even if they are stored in iCloud.
Previous versions would back up the folder, which might not include all photos.
Use the option--photos-handling to disable or tweak this feature.

When using advanced options, the human-readable description is now displayed with the option name, and you can search for either.

Detailed list of changes:

• Fixed an issue with SyncTool and retries that would fail on some backends
• Improved support for OEM injection
• Return status of backup in ServerUtil, thanks@greyxr
• Updated to run on .NET10
• Improved deadlock detection for restore with fewer false positives
• Updated Uplink.NET to v2.14.3623 (for Storj backend)
• Added support for MacOS Photos
• Disabled internal timeout in AzureBlobStorage
• Updated localizations, thanks to all translators!

ngclient changes:

• Updated to latest ShipUI
• Preload modules for better desktop performance
• Fixed some issues with localization not being applied
• Updates to the options list
• Updated localizations, thanks to all translators!
• Fixed an issue with Rclone not maintaining letter-case for remote
• Simplified the schedule setup page
• Improved AuthID picking
• Improved integration with console
• Cleaned the sidebar slightly
• Fixed an issue with styling in settings
• Restore flow will now default to not overwrite existing files
• Added both option name and short description to advanced options
• Fixed not showing "Verifying" at the start of the backup operation
• Handle global settings with and without-- prefix
• Upgraded to Anguler 21

Contributors

This is a minor patch release to fix some issues uncovered with the latest stable release.

Changes from 2.2.0.0 to 2.2.0.1

• Report remote filenames on failures
• Fixed issues with timeouts on MSGraph-based backends (OneDrive and others)
• Fixed base-href placement for better proxy support, thanks@peloyeje
• Fixed an issue with not parsing enums with multiple values (aka flags)
• Clear warnings for configuration issues, if the issues are resolved
• Better detection of valid S3 hostnames
• Showing assembly version in version number
• Marked--send-mail-password as a password setting
• Improved WebDAV parsing logic for more servers
• Made pCloud options visible
• Added option to disable remote control while being connected to console
• Fixed a retry issue with sync-tool

Changes in user interface from 2.2.0.0 to 2.2.0.1

• Added support for picking power-mode provider
• Fixed issues with filters
• Fixed styling of some buttons
• Fixed issue with "Test connection" not offering to fix know issues
• Made the export tooltip optional
• Fixed an issue with parsing the exclude attributes and file size
• Improved some hint texts
• Fixed support for showing durations that include days
• The button to resume from paused state is now called "Resume"
• Hide usage reporter options if this is disabled via environment variables
• Show currently installed version on the settings page
• Set user language on first load to avoid default English page
• Added check when doing cross-OS restores
• Prevent clicking on steps that cannot be clicked
• Added password visibility toggle on main password
• Added some improved views for emails and files
• Fixed an issue with allowing uppercase and non-ASCII names in the folder path
• Commandline UI now loads global settings
• Very long error messages now introduce scrolling inside the popup
• Show configured backups for restore first, then direct restore options
• Added scrolling to source paths, which allows more than 25 sources to be added
• Filejump is hidden as it is undergoing a migration
• Sizes are now allowing bytes for precision
• Incorrect volume size warning fixed
• Added new console connect flow

Summary of changes from 2.1 to 2.2

• New user interface
• New backends: pCloud, Filen and SMB
• New faster restore flow, use--restore-legacy=true to fall back
• Installer signing keys are from Duplicat Inc
• Remote sources: S3, IDrive, SSH, and CIFS
• AWS and Azure blob storage cold storage support
• Database downgrade tool is included
• Local database updated to version 17
• Settings database updated to version 9
• Improved throttle calculations
• Removed Sia backend and marked Mega as unsupported
• All backends now have individual timeout settings
• Updated location default location for storage folder
• Securing the permissions on the storage folder
• New file and folder enumeration logic
• Timeout logic on all backend operations
• Improved database validation and repair logic
• ServerUtil can output JSON for script integration
• Improved support for having Duplicati behind a proxy
• Updated throttle logic, all streams share the throttle
• Improved repair logic
• VSS is automatically on if running on Windows with sufficient privileges
• Improved backend test function
• Ability to suppress warnings
• Support for remotely provided reporting url and remotely managed backup configs
• Added support for Google IAM on Google Drive

Contributors

This release is a canary release intended to be used for testing.

Changes in this versions

This version is a bugfix release for some issues discovered with the previous canary build and stable release.
Some of the changes in this Canary will be applied to a new revised stable release.

The changes in this version are mostly bugfixes and minor improvements that are not expected to cause issues.

Detailed list of changes:

• Reporting remote filename on errors instead of temporary file
• Added guards and fix for timeouts in MSGraph backend
• Added guard against sending an unsupported header in remote control
• Fixed href-base replacement, thanks@peloyeje
• Fixed an error parsing flag-options (multiple option names in a single option)
• Fixed an incorrect option name in release builder
• Clear notifications on startup for issues that are resolved
• Improved S3 hostname check to auto-prune trailing slashes
• Show the assembly version in the version number
• Made--send-email-password a password option so it is guarded
• Added a dynamically adjusting deadlock timer for the restore flow
• Improved parsing of WebDAV PROPFIND messages to cover more servers
• Exposed options for pCloud that were previously not showed
• Made the file-backend's--use-move-for-put option auto-disable streaming transfers
• Fixed an issue with restoring from a config file that would fail if the backups were encrypted
• Added option to disable remote control when connected to the console

ngclient changes:

• Added support for picking the power-mode provider in settings
• Fixed some issues with filters
• Fixed some buttons that were missing styling
• Fixed issue with Test function not asking to create folder
• Fixed not showing tooltip to remember password when not encrypting exported file
• Fixed issues with parsing the exclude attributes and exclude by file size
• Improved hint texts on start page to be less cloud-oriented
• Correctly show duration if it takes over 24h
• Renamed the "Start" button to "Resume" when the server is paused
• No longer showing the usage reporter option if this is disabled by environment variables
• The settings page now shows the currently installed version
• Better detection of users language on initial load
• Add a warning when doing cross-OS restores
• Toggled some steps as disabled when clicking them would not result in a working flow
• Added password visibility toggle on login page
• Improved advanced options view to show file pickers and email parsers
• Improved the display of the warning when typing a custom destination URL
• Fixed some issues with the URL parsing, especially making it case-preserving and fixing Rclone
• Using the Commandline UI now includes the global advanced settings
• Very long error messages no longer overflow the screen but gets scrollable instead
• Changed order of options on the restore overview page to nudge towards using configured backups
• Added scrolling to source paths when entering more than 25 sources
• Hiding FileJump destination due to a pending migration
• Sizes can again be chosen in bytes, which also fixes the wrong warning displayed on the volume size picker
• Updated localization, thanks to all translators
• Added a new connection link that shows the console connection status
• Updated naming for the console connection to be more consistent
• Hide connection options when connecting remotely

Contributors

About this release

This is the next stable release building on the 2.1 line and adds more features and stability fixes, and we are super excited to share this version!

A big thanks to the supportive Duplicati user base who continues to contribute with fixes, issue reports and feature requests.

The most visual change for this version is the use of the new user interface, but there is also a massive list of fixes and improvements in this version. Below is a summary of some of the larger changes.

If you have already been using the beta release, this release is the same as v2.1.2.3.

New user interface

The new user interface is rewritten from scratch and has the same general structure as the previous one, but we made some things more user friendly and more visually appealing.

Should you find a function that is lacking, we have included buttons to switch back-n-forth between the two user interfaces.

New backends

We added support for using the cloud services pCloud, Filen and Filejump.

We also added support for connections with SMB.
The new SMB backend can connect directly to a Windows share without needing to mount the folder or install SMB support, and it works on Windows, Linux and macOS.

New restore flow

The new restore flow is enabled by default and you should not notice anything other than faster restores!
In case there is an issue with this, it is possible to set the option--restore-legacy=true to fall back to the previous restore flow.

New signing keys

The packages are now signed by Duplicati Inc, and the Windows packages are signed with EV certificates.

Remote source support

With this version it is now possible to make backups of local and some remote data.

In this version, S3, IDrive, SSH and CIFS sources are supported.
The UI does not yet support editing this nicely, but you can enter a path in the special format to "mount" the remote source.

For the commandline (and manual text entry in the UI) enter sources such as:

// Linux/MacOS@/mnt/s3-data|s3://example?auth-username=...// Windows@X:\server1|smb://server/share?auth-username=...

This will cause the backups to fetch data from the remote sources.
We will add an editor to the UI to allow browsing the remote sources, similar to the local files.

Archive attributes support

For AWS S3 and Azure Blob Storage, Duplicati will now respect the archive attributes and not attempt to read and verify files that have been moved to cold storage.

Database updates

This version updates the format of the local database to version 17.
This version updates the format of the settings database to v9.

To assist in downgrades there is now a bundledCommandLine.DatabaseTool.exe /duplicati-database-tool that can downgrade databases with minimal data loss.
For a downgrade from this version to 2.1.0.5 this will only drop a few indexes and not cause any data loss.
Be sure to run the database toolbefore downgrading the install as the tool needs to be in the latest version.

Throttle updated

For backups that throttle the transfer speeds, the new throttle logic uses a shared limit for the backup, where previous versions would apply the throttle for each individual stream.

Removed backends

The Sia backend has been removed due to an incompatible hardfork.

The Mega backend has been marked as unmaintained due to lack of a supported library.
For now, the Mega library still works, but you should migrate away from it. The new Mega S4 storage might be an option.

Updates to all backends

All backends are updated to handle timeouts in a granular manner.

This means the option--http-operations-timeout is no longer present, but instead there are now--read-write-timeout,--list-timeout, and-short-timeout. These have sensible defaults but are open for tweaking.

The option--allowed-ssl-versions is only present for the FTP backend, all other backends use the operating system to figure out what version to use.

New datafolder default location

For Duplicati running as a service there are now changes for the default folder location.
If you are not running Duplicati as a service/daemon, this change has no effect.

Windows: Avoid storing data inC:\Windows\System32\config\systemprofile\AppData\Local\Duplicati and prefer{CommonProgramData}\Duplicati, usually resolving toC:\ProgramData\Duplicati.

This change is to counter an issue where Windows will wipe theC:\Windows folder on major updates, and destroy the backup configuration in the process. If your service stores data underC:\Windows you will see a warning in the user interface on startup.

Linux: Avoid storing data in/Duplicati and prefer/var/lib/Duplicati.
This was caused by the update to .NET8 where the data folder was not resolved correctly and returned/, which is not the ideal place for storing data.

If you are using--server-datafolder orDUPLICATI_HOME, this has no effect on the database, but may cause your machineid and installid to change.

Themachineid.txt andinstallid.txt would previously be stored in the local app data folder, even when using portable mode or choosing a specific data folder.

This has been fixed, so the files will now follow the database.
If you are using the Duplicati console or otherwise depend on these values, you need to move them into the folder where the database is stored.

This update also sets permissions on the data folder and the databases to prevent unauthorized access from local accounts.
To opt out of setting permissions on each startup, place a file namedinsecure-permissions.txt inside the data folder.

Other large changes

• New file and folder enumeration logic
• Timeout logic on all backend operations
• Improved database validation and repair logic
• ServerUtil can output JSON for script integration
• Improved support for having Duplicati behind a proxy
• Updated throttle logic, all streams share the throttle
• Improved repair logic
• VSS is automatically on if running on Windows with sufficient privileges
• Improved backend test function
• Ability to suppress warnings
• Support for remotely provided reporting url and remotely managed backup configs
• Added support for Google IAM on Google Drive

This release is a beta release inteded to be used for testing.

If no major issue are found with this release, it will be used to create a new stable release.

About this release

This release is a minor bugfix release from the previous beta and fixes a few minor issues discovered during the testing period.

Database version upgrade

No database version upgrades in this version, but the beta releases updates the local database to v17 and the settings database to v9.
The database tool can downgrade to previous versions.

New since last beta

• Added an error code check for B2 uploads
• Updated ngclient to latest version to fix tooltip issues

Summary of large changes since last stable

• New user interface
• New datafolder default location for Administrator/root
• New backends pCloud, Filen and Filejump.
• New backend for SMB to avoid mounting shares
• Removed Sia backend and marked Mega as deprecated
• Common http options are now applied to backends, and timeout options are renamed
• Installer packages are now signed by Duplicati Inc
• Remote source support for S3, SSH and SMB
• Database is upgraded to v17 for local db, and v9 for settings database
• Database upgrade/downgrade tool is provided
• New file and folder enumeration logic
• Timeouts logic on all backend operations
• Improved database validation and repair logic
• ServerUtil can output JSON for script integration
• Improved support for having Duplicati behind a proxy
• Updated throttle logic, all streams share the throttle
• Improved repair logic
• VSS is automatically on if running on Windows with sufficient privileges
• Improved backend test function
• Ability to suppress warnings
• Support for remotely managed backup configs
• Added support for Google IAM

This release is a beta release inteded to be used for testing.

If no major issue are found with this release, it will be used to create a new stable release.

About this release

This release is primarily a bugfix release from the previous beta and fixes a few minor issues discovered during the testing period.

Database version upgrade

No database version upgrades in this version, but the beta releases updates the local database to v17 and the settings database to v9.
The database tool can downgrade to previous versions.

New since last beta

• Fixed an issue with rebuilt database having null values for hashes
• Fixed an issue with non-US locales using different characters for the negative number symbol
• Updated UI to latest version to fix tooltip issues

Summary of large changes since last stable

• New user interface
• New datafolder default location for Administrator/root
• New backends pCloud, Filen and Filejump.
• New backend for SMB to avoid mounting shares
• Removed Sia backend and marked Mega as deprecated
• Common http options are now applied to backends, and timeout options are renamed
• Installer packages are now signed by Duplicati Inc
• Remote source support for S3, SSH and SMB
• Database is upgraded to v17 for local db, and v9 for settings database
• Database upgrade/downgrade tool is provided
• New file and folder enumeration logic
• Timeouts logic on all backend operations
• Improved database validation and repair logic
• ServerUtil can output JSON for script integration
• Improved support for having Duplicati behind a proxy
• Updated throttle logic, all streams share the throttle
• Improved repair logic
• VSS is automatically on if running on Windows with sufficient privileges
• Improved backend test function
• Ability to suppress warnings
• Support for remotely managed backup configs
• Added support for Google IAM

This release is a canary release intended to be used for testing.

Changes in this versions

This version is a bugfix release for some issues discovered with the previous canary build.

Detailed list of changes:

• Using the JsonSignature library instead of embedding the code
• Added status code check for B2 backend

ngclient changes:

• Fixed an issue where usage reports could not be disabled
• Fixed an issue where tooltips could prevent buttons from being clicked

This release is a beta release inteded to be used for testing.

If no major issue are found with this release, it will be used to create a new stable release.

About this release

This release is primarily a bugfix release from the previous beta and fixes a few minor issues discovered during the testing period.

A few minor enhancements have been added as they proved stable.

Database version upgrade

This version updates the server database to v9 and adds an extra column.
The database tool can downgrade without data loss.

Permission update on Windows

To simplify working with a Windows Service based installation, the privileges set on the database and data folder now grants explicit access to Admin as well as the intended users.

New since last beta

• Revert MinIO API to v6.0.0 to fix upload failures
• S3 checks that the path does not contain an endpoint, thanks@smyja
• Fixed support for HyperV and MSSQL in new user interface
• Better parsing of MSGraph errors
• Support for remotely managed backup configs
• Removing null characters from paths to fix a Windows mounted/virtual folder issue
• Fixed log not showing values for SQL statements
• Added support for Google IAM
• Updated CoCoL to remove a flurry of unhandled exception log messages
• Fixed a case where recreated index files were sometimes incomplete
• Permissions for datafolder on Windows are now granted to Administrator as well
• Fixed a slowdown when listing files to restore
• Updated UI to latest version

Summary of large changes since last stable

• New user interface
• New datafolder default location for Administrator/root
• New backends pCloud, Filen and Filejump.
• New backend for SMB to avoid mounting shares
• Removed Sia backend and marked Mega as deprecated
• Common http options are now applied to backends, and timeout options are renamed
• Installer packages are now signed by Duplicati Inc
• Remote source support for S3, SSH and SMB
• Database is upgraded to v17 for local db, and v9 for settings database
• Database upgrade/downgrade tool is provided
• New file and folder enumeration logic
• Timeouts logic on all backend operations
• Improved database validation and repair logic
• ServerUtil can output JSON for script integration
• Improved support for having Duplicati behind a proxy
• Updated throttle logic, all streams share the throttle
• Improved repair logic
• VSS is automatically on if running on Windows with sufficient privileges
• Improved backend test function
• Ability to suppress warnings

Contributors