shouldiuse.io

Comparison

Kopia vs Duplicati

Kopia lands on Worth it, and Duplicati lands on Depends.

Kopia versus Duplicati
CompareKopiaDuplicati
VerdictWorth itDepends
Best forSelf-hosters and NAS ownersSelf-hosters and homelab users
Who it's not forNon-technical users wanting set-and-forget backups . use Backblaze or Time MachineNon-technical users wanting set-and-forget backup
PrivacyEncrypted by default; one critical server RCE (CVE-2026-45695) fixed in 0.23.0 . run the latest version.⁷Encryption design is solid (AES-256, zero-trust), but 2026 advisories mean you must run the latest patched version.16
Support qualityCommunity forums only; no paid supportCommunity forum only; no vendor support on free tier
Public sentimentOverwhelmingly positive among self-hosters and technical users who praise its speed, with a minority reporting defaults and performance issues.³Reviews are split: many call it powerful and unfairly criticized, while others report reliability problems severe enough to switch away.14
Biggest gotchaPatch to 0.23.0+ before running Kopia server; unauthenticated RCE (CVE-2026-45695)v2.3.0.1 has a published CERT alert (VU#847406) . run only the latest release16

Pick Kopia when

  • Self-hosters and NAS owners
  • Multi-OS households and small offices
  • Developers backing up to S3/B2
  • Privacy-focused users wanting encrypted dedup

When Kopia is not a fit

  • Non-technical users wanting set-and-forget backups . use Backblaze or Time Machine
  • Businesses needing vendor SLAs and support contracts
  • Anyone who won't promptly patch an internet-exposed Kopia server
  • Guess: enterprises needing certified compliance and managed backup

Pick Duplicati when

  • Self-hosters and homelab users
  • Technical users backing up to B2/S3
  • Budget-conscious encrypted backups
  • MSPs wanting a free backup agent

When Duplicati is not a fit

  • Non-technical users wanting set-and-forget backup
  • Businesses needing vendor SLAs or support contracts
  • Anyone unwilling to patch quickly after CVEs
  • Compliance-driven teams needing audited tooling

Sources

  1. official
  2. official
  3. review
  4. review
  5. review
  6. security
  7. security
  8. review
  9. review
  10. review
  11. review
  12. review
  13. review
  14. review
  15. review
  16. security