borg-init(1) borg backup tool borg-init(1) (NAME) borg-init - borg (SYNOPSIS) borg [common options] init [options] [REPOSITORY] (DESCRIPTION) . () . (Encryption mode TL;DR) . . . repokey : borg init --encryption repokey /path/to/repo . . Borg : 1. . 2. Borg ( key_files ). 3. Borg . 4. Borg ( repokey repokey-blake2 keyfile keyfile-blake2 Borg ). ( ) . 5. Borg Borg . 6. Borg . . Borg . . " " . ( ) borg_key_export . - Borg . . : Borg AES Intel AMD ARM ( ) . () Borg SHA256 BLAKE2b . ARM ARMv7 NEON ( ) ARMv8 ( ) SHA256 . AMD Zen 1 ( ) AMD Ryzen . Intel Ice Lake ( ) Rocket Lake ( ) . . SHA256 BLAKE2b - . repokey repokey-blake2 ( -blake2) . . (Picking a passphrase) . / . borg . ASCII : o Borg ( UTF-8 ) . o : / / . ASCII ASCII . / . borg_key_change-passphrase . (More about encryption modes) . repokey . repokey ( repokey-blake2 ) . Borg : +-----------+--------------------------------+--------------------------------+--------------------------------------+ |/MAC | | | | | | | | (AEAD AES) | | | | | | | | | | | +-----------+--------------------------------+--------------------------------+--------------------------------------+ |SHA-256 | none | authenticated | repokey keyfile | +-----------+--------------------------------+--------------------------------+--------------------------------------+ |BLAKE2b | (n/a) | authenticated-blake2 | repokey-blake2 keyfile-blake2 | +-----------+--------------------------------+--------------------------------+--------------------------------------+ Borg 1.0 none repokey keyfile . . : none . none . none Borg . (DoS) . none authenticated repokey keyfile ( ). authenticated authenticated-blake2 . BORG_WORKAROUNDS=authenticated_no_key (environment-variables ). keyfile keyfile-blake2 . Borg . . repokey repokey-blake2 . . repokey authenticated borg_key_change-passphrase . : repokey repokey-blake2 . . . Borg ( ) borg_key_export . keyfile . . keyfile keyfile-blake2 ( ~/.config/borg/keys) . Borg . . Borg . Borg . borg_key_export . keyfile keyfile-blake2 " " . ( ) keyfile keyfile-blake2 . : repokey keyfile AES-CTR-256 HMAC-SHA256 (EtM Encrypt-then-MAC) . HMAC-SHA256 ( ). Borg . repokey-blake2 keyfile-blake2 HMAC-SHA256 BLAKE2b-256 . BLAKE2b-256 . Borg 1.1 . authenticated HMAC-SHA256 repokey keyfile ( ). repokey . Borg 1.1 . authenticated-blake2 authenticated BLAKE2b-256 BLAKE2b . Borg 1.1 . none . SHA256 . DoS ( ). . internals_hashindex . Borg . (OPTIONS) Borg borg-common(1) . (arguments) REPOSITORY (options) -e MODE, --encryption MODE () --append-only (append-only). delete prune . append_only_mode . --storage-quota QUOTA ( 5G 1.5T). : . --make-parent-dirs . --import-related-secrets PATH PATH (EXAMPLES) # repokey BLAKE2b ( Borg 1.1 ) $ borg init --encryption=repokey-blake2 /path/to/repo # ( ) $ borg init --encryption=none /path/to/repo # ( borg ssh) # repokey: () /config $ borg init --encryption=repokey-blake2 user@hostname:backup # ( borg ssh) # keyfile: () ~/.config/borg/keys/ $ borg init --encryption=keyfile user@hostname:backup (SEE ALSO) borg-common(1), borg-create(1), borg-delete(1), borg-check(1), borg-list(1), borg-key-import(1), borg-key-export(1), borg-key-change-passphrase(1) (AUTHOR) The Borg Collective 2026-07-18 borg-init(1)