Backup system with multiple recovery keys

A non-transitory machine readable medium storing a program which when executed by at least one processing unit recovers a set of backup data for installation on a device, the program comprising sets of instructions for:

• receiving input of user-entered data used to generate a public/private escrow key pair associated with a particular device of a set of related devices;
• transmitting data that proves possession of the private escrow key to a set of secure servers that store a plurality of secure escrow objects for the set of related devices, each of the secure escrow objects comprising a private recovery key of a different device encrypted with a public key of the secure servers and the public escrow key associated with the device;
• when the user-entered data that is used to generate the public/private escrow key pair is correct, receiving the private recovery key of the particular device from the set of secure servers;
• and
• using the received private recovery key to access one of a plurality of master recovery objects stored with the backup data, each of the master recovery objects comprising a master recovery key for accessing the backup data encrypted with a public recovery key of a different one of the related devices.

A device comprising:

• a set of processing units;
• and
• a non-transitory machine readable medium storing a program which when executed by at least one of the processing units recovers a set of backup data for installation on the device, wherein the backup data is stored for a set of related devices by one of the related devices, the program comprising sets of instructions for:
• receiving input of user-entered data used to generate a public/private escrow key pair associated with a particular one of the related devices;
• transmitting data that proves possession of the private escrow key to a set of secure servers that store a plurality of secure escrow objects for the set of related devices, each of the secure escrow objects comprising a private recovery key of a different device encrypted with a public key of the secure servers and the public escrow key associated with the device;
• when the user-entered data that is used to generate the public/private escrow key pair is correct, receiving the private recovery key of the particular device from the set of secure servers;
• and
• using the received private recovery key to access one of a plurality of master recovery objects stored with the backup data, each of the master recovery objects comprising a master recovery key for accessing the backup data encrypted with a public recovery key of a different one of the related devices.