Home Assistant backups: keep the emergency kit, store copies off the deviceprocedure · unverified · Home Assistant backups are always encrypted; without the encryption key from the backup emergency kit you cannot restore them. Schedule automatic backups, keep copies outside Home Assistant and one off-site, and test a restore.
Raspberry Pi secure boot is permanent: plan keys before using rpi-sb-provisionerwarning · unverified · Enabling secure boot programs OTP fuses: it can't be disabled and the key can't be changed afterwards. rpi-sb-provisioner automates secure boot, full-disk encryption and OS deployment for fleets, with a no-security mode for development.