Bottom line: DSE recommendation: decide what the comparison must establish before accepting its report as evidence about an encrypted copy. Record which side is the source, which side is being checked and whether extra destination files matter to the owner’s acceptance criteria.
\nThe rclone cryptcheck reference requires checksum support from the encrypted remote’s underlying backend. With the documented --one-way flag, extra destination files that are absent from the source are not detected. The reference describes reports for matching files, differences and files missing from either side.
This command reference does not establish that a particular backend provides the required capability or that a source is still available. A comparison result is not a retention decision, a complete service recovery test or permission to change files. This article does not approve a sync, deletion or repair operation.
\nThe following paragraphs are DSE recommendations, not instructions or guarantees from the source.
\nDefine three logical fixture items: A has matching content in both sets; B has deliberately different content; C exists only at the destination. These are proposed test inputs, not observed files or results. State which differences the owner needs the review to identify, especially whether item C belongs in the acceptance question.
\nConfirm the backend checksum prerequisite in its current official documentation before preparing the exercise. Record the reviewed client, underlying backend and encrypted remote. Explain the comparison direction in plain language. If the required capability or the authoritative source population cannot be established, stop rather than interpreting an unsuitable check as evidence.
\nKeep the exercise observational. Record the selected mode and the expected scope alongside the three-item matrix. Assign a person to investigate unexplained differences and protect file paths in shared reports. Obtain separate approval for any later action on the data; the comparison plan does not authorize sync, deletion or repair.
\nProposed verification, not a performed test: prepare the nonsensitive A, B and C fixture in an approved test remote. Rehearse the intended comparison and retain the actual reports for the matching, changed and destination-only populations. With --one-way selected, destination-only item C is outside the documented check. If the owner requires C to be identified, do not accept that mode as proof of the wider requirement.
Retain the endpoint identities, prerequisite evidence, client version, invocation and selected mode with the starting matrix and redacted observations. Have a second operator explain each population and any untested condition. Investigate disagreement before accepting the comparison. Keep subsequent data remediation and restoration under separate plans; none of these proposed cases establishes a completed recovery exercise.
\nSource review completed October 28, 2026. Recheck the official documentation and deployment-specific applicability before a production change.
\n", "content_text": "Bottom line: DSE recommendation: decide what the comparison must establish before accepting its report as evidence about an encrypted copy. Record which side is the source, which side is being checked and whether extra destination files matter to the owner’s acceptance criteria.\nSource fact: what the authority says\nThe rclone cryptcheck reference requires checksum support from the encrypted remote’s underlying backend. With the documented --one-way flag, extra destination files that are absent from the source are not detected. The reference describes reports for matching files, differences and files missing from either side.\nWhat the source does not establish\nThis command reference does not establish that a particular backend provides the required capability or that a source is still available. A comparison result is not a retention decision, a complete service recovery test or permission to change files. This article does not approve a sync, deletion or repair operation.\nApplicability questions\n\nWhich client version, underlying backend and encrypted remote are in the proposed comparison?\nWhat source is authoritative for this exercise, and who has approved access to its data?\nMust the review identify extra destination files, missing source files, differing content or all of these?\nWhat remote access, transfer costs and handling restrictions need an owner’s review before testing?\n\nDSE recommendation: controlled next steps\nThe following paragraphs are DSE recommendations, not instructions or guarantees from the source.\nDefine three logical fixture items: A has matching content in both sets; B has deliberately different content; C exists only at the destination. These are proposed test inputs, not observed files or results. State which differences the owner needs the review to identify, especially whether item C belongs in the acceptance question.\nConfirm the backend checksum prerequisite in its current official documentation before preparing the exercise. Record the reviewed client, underlying backend and encrypted remote. Explain the comparison direction in plain language. If the required capability or the authoritative source population cannot be established, stop rather than interpreting an unsuitable check as evidence.\nKeep the exercise observational. Record the selected mode and the expected scope alongside the three-item matrix. Assign a person to investigate unexplained differences and protect file paths in shared reports. Obtain separate approval for any later action on the data; the comparison plan does not authorize sync, deletion or repair.\nVerification and evidence\nProposed verification, not a performed test: prepare the nonsensitive A, B and C fixture in an approved test remote. Rehearse the intended comparison and retain the actual reports for the matching, changed and destination-only populations. With --one-way selected, destination-only item C is outside the documented check. If the owner requires C to be identified, do not accept that mode as proof of the wider requirement.\nRetain the endpoint identities, prerequisite evidence, client version, invocation and selected mode with the starting matrix and redacted observations. Have a second operator explain each population and any untested condition. Investigate disagreement before accepting the comparison. Keep subsequent data remediation and restoration under separate plans; none of these proposed cases establishes a completed recovery exercise.\nOfficial references\n\nrclone — rclone cryptcheck — official product documentation; source version and applicability limits are stated above.\n\nSource review completed October 28, 2026. Recheck the official documentation and deployment-specific applicability before a production change.", "content_markdown": "Bottom line: DSE recommendation: decide what the comparison must establish before accepting its report as evidence about an encrypted copy. Record which side is the source, which side is being checked and whether extra destination files matter to the owner’s acceptance criteria.\n\n## Source fact: what the authority says\n\nThe [rclone cryptcheck reference](https://rclone.org/commands/rclone_cryptcheck/) requires checksum support from the encrypted remote’s underlying backend. With the documented --one-way flag, extra destination files that are absent from the source are not detected. The reference describes reports for matching files, differences and files missing from either side.\n\n## What the source does not establish\n\nThis command reference does not establish that a particular backend provides the required capability or that a source is still available. A comparison result is not a retention decision, a complete service recovery test or permission to change files. This article does not approve a sync, deletion or repair operation.\n\n## Applicability questions\n\n- Which client version, underlying backend and encrypted remote are in the proposed comparison?\n\n- What source is authoritative for this exercise, and who has approved access to its data?\n\n- Must the review identify extra destination files, missing source files, differing content or all of these?\n\n- What remote access, transfer costs and handling restrictions need an owner’s review before testing?\n\n## DSE recommendation: controlled next steps\n\nThe following paragraphs are DSE recommendations, not instructions or guarantees from the source.\n\nDefine three logical fixture items: A has matching content in both sets; B has deliberately different content; C exists only at the destination. These are proposed test inputs, not observed files or results. State which differences the owner needs the review to identify, especially whether item C belongs in the acceptance question.\n\nConfirm the backend checksum prerequisite in its current official documentation before preparing the exercise. Record the reviewed client, underlying backend and encrypted remote. Explain the comparison direction in plain language. If the required capability or the authoritative source population cannot be established, stop rather than interpreting an unsuitable check as evidence.\n\nKeep the exercise observational. Record the selected mode and the expected scope alongside the three-item matrix. Assign a person to investigate unexplained differences and protect file paths in shared reports. Obtain separate approval for any later action on the data; the comparison plan does not authorize sync, deletion or repair.\n\n## Verification and evidence\n\nProposed verification, not a performed test: prepare the nonsensitive A, B and C fixture in an approved test remote. Rehearse the intended comparison and retain the actual reports for the matching, changed and destination-only populations. With --one-way selected, destination-only item C is outside the documented check. If the owner requires C to be identified, do not accept that mode as proof of the wider requirement.\n\nRetain the endpoint identities, prerequisite evidence, client version, invocation and selected mode with the starting matrix and redacted observations. Have a second operator explain each population and any untested condition. Investigate disagreement before accepting the comparison. Keep subsequent data remediation and restoration under separate plans; none of these proposed cases establishes a completed recovery exercise.\n\n## Official references\n\n- [rclone — rclone cryptcheck](https://rclone.org/commands/rclone_cryptcheck/) — official product documentation; source version and applicability limits are stated above.\n\nSource review completed October 28, 2026. Recheck the official documentation and deployment-specific applicability before a production change." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/check-checksum-support-and-scope-before-rclone-cryptcheck/", "url": "https://update.dsesecurity.com/updates/check-checksum-support-and-scope-before-rclone-cryptcheck/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-28" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/check-checksum-support-and-scope-before-rclone-cryptcheck/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Business Continuity", "item": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "ListItem", "position": 3, "name": "Check checksum support and scope before rclone cryptcheck", "item": "https://update.dsesecurity.com/updates/check-checksum-support-and-scope-before-rclone-cryptcheck/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/check-checksum-support-and-scope-before-rclone-cryptcheck/#article", "identifier": "https://update.dsesecurity.com/updates/check-checksum-support-and-scope-before-rclone-cryptcheck/", "url": "https://update.dsesecurity.com/updates/check-checksum-support-and-scope-before-rclone-cryptcheck/", "headline": "Check checksum support and scope before rclone cryptcheck", "description": "rclone cryptcheck requires checksum support from the encrypted remote’s underlying backend, and one-way checking does not detect destination-only extra files.", "abstract": "rclone cryptcheck requires checksum support from the encrypted remote’s underlying backend, and one-way checking does not detect destination-only extra files.", "articleBody": "Bottom line: DSE recommendation: decide what the comparison must establish before accepting its report as evidence about an encrypted copy. Record which side is the source, which side is being checked and whether extra destination files matter to the owner’s acceptance criteria.\nSource fact: what the authority says\nThe rclone cryptcheck reference requires checksum support from the encrypted remote’s underlying backend. With the documented --one-way flag, extra destination files that are absent from the source are not detected. The reference describes reports for matching files, differences and files missing from either side.\nWhat the source does not establish\nThis command reference does not establish that a particular backend provides the required capability or that a source is still available. A comparison result is not a retention decision, a complete service recovery test or permission to change files. This article does not approve a sync, deletion or repair operation.\nApplicability questions\n\nWhich client version, underlying backend and encrypted remote are in the proposed comparison?\nWhat source is authoritative for this exercise, and who has approved access to its data?\nMust the review identify extra destination files, missing source files, differing content or all of these?\nWhat remote access, transfer costs and handling restrictions need an owner’s review before testing?\n\nDSE recommendation: controlled next steps\nThe following paragraphs are DSE recommendations, not instructions or guarantees from the source.\nDefine three logical fixture items: A has matching content in both sets; B has deliberately different content; C exists only at the destination. These are proposed test inputs, not observed files or results. State which differences the owner needs the review to identify, especially whether item C belongs in the acceptance question.\nConfirm the backend checksum prerequisite in its current official documentation before preparing the exercise. Record the reviewed client, underlying backend and encrypted remote. Explain the comparison direction in plain language. If the required capability or the authoritative source population cannot be established, stop rather than interpreting an unsuitable check as evidence.\nKeep the exercise observational. Record the selected mode and the expected scope alongside the three-item matrix. Assign a person to investigate unexplained differences and protect file paths in shared reports. Obtain separate approval for any later action on the data; the comparison plan does not authorize sync, deletion or repair.\nVerification and evidence\nProposed verification, not a performed test: prepare the nonsensitive A, B and C fixture in an approved test remote. Rehearse the intended comparison and retain the actual reports for the matching, changed and destination-only populations. With --one-way selected, destination-only item C is outside the documented check. If the owner requires C to be identified, do not accept that mode as proof of the wider requirement.\nRetain the endpoint identities, prerequisite evidence, client version, invocation and selected mode with the starting matrix and redacted observations. Have a second operator explain each population and any untested condition. Investigate disagreement before accepting the comparison. Keep subsequent data remediation and restoration under separate plans; none of these proposed cases establishes a completed recovery exercise.\nOfficial references\n\nrclone — rclone cryptcheck — official product documentation; source version and applicability limits are stated above.\n\nSource review completed October 28, 2026. Recheck the official documentation and deployment-specific applicability before a production change.", "datePublished": "2026-10-28T23:23:20+00:00", "dateModified": "2026-10-28T23:23:38+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/check-checksum-support-and-scope-before-rclone-cryptcheck/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/check-checksum-support-and-scope-before-rclone-cryptcheck/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Check checksum support and scope before rclone cryptcheck" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Advisory priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 536, "timeRequired": "PT3M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "rclone — rclone cryptcheck", "url": "https://rclone.org/commands/rclone_cryptcheck/" } } ] } }