Do not publish security-sensitive details, backup contents, passwords, checksums, or diagnostic exports in a public issue.

Report a suspected vulnerability privately through GitHub's security advisory feature for this repository. Include the affected version, reproduction steps, and the potential impact.

BackupCheckup 2.0 and newer can download the newest backup to Home Assistant's temporary local storage for a read-only integrity check. Version 2.2 adds configured size and time budgets, free-space checks, owner-only temporary permissions, startup cleanup, and an administrator-only manual verification action. The temporary backup and any extracted SQLite database are removed when the check finishes; a Repair issue is created if cleanup cannot be confirmed.

The integration may use Home Assistant's configured backup password in memory to decrypt protected archives. It never logs or persists that password.

The last SHA-256 checksum and privacy-safe result metadata are stored in Home Assistant's private integration storage. Diagnostics and normal entity attributes exclude user-defined backup names, native backup IDs, and raw third-party exception messages. An explicit expert option can expose full newest-backup metadata in entity attributes when required.