Systems and methods are provided for storing and restoring digital data. In some implementations, a method is provided. The method includes identifying an encrypted source disk image to be included in a backup operation, the encrypted disk image being encrypted with a first key and generating an encrypted backup disk image, the encrypted backup disk image being encrypted with a second key protected with a randomly generated password. Other embodiments of this aspect include corresponding systems, apparatus, computer program products, and computer readable media.