MongoDB logo MongoDB · 4.4 → 8.0 · Atlas · replica sets · sharded

The MongoDB backup tool that

Point SQLBackup at MongoDB and it handles the rest — native mongodump with --oplog for a consistent snapshot, a gzipped BSON archive, client-side AES-256 encryption, and shipping offsite to S3, SFTP or local storage on a schedule. Then mongorestore any database in minutes.

Free Download See how it works
99.9%
Backup success
5 min
Typical restore
256-bit
AES-GCM
SQLBackup dashboard showing databases protected, backups this month and storage by destination New Backup wizard step 1 — choosing the MongoDB database engine Backup history screen listing every run with size, duration and status Settings screen with encryption, verify-after-backup and OS keyring credential options
analytics · backed up 2 min ago
mongodump/ BSON archive/ --oplog/ streaming gzip/ AES-256-GCM/ Amazon S3/ SFTP/ mongorestore/
4.4–8.0
MongoDB versions
6
Storage destinations
256-bit
AES-GCM encryption
1 cmd
To fully restore
Written & maintained by the SQLBackup engineering team
Database & backend engineers · reviewed for technical accuracy · last updated July 2026
Native MongoDB tools No telemetry
Why a dedicated tool

A cron job running mongorestore isn't a backup strategy

It breaks silently after a version upgrade, leaves plaintext dumps on disk, and nobody ever tests the restore. SQLBackup fixes all three — and keeps a record that it did.

Every MongoDB, one workflow

Self-hosted replica sets, sharded clusters, MongoDB Atlas, or a container — SQLBackup uses MongoDB's own mongodump/mongorestore, capturing a consistent BSON snapshot with --oplog. Portable archive, ready to restore anywhere.

  • MongoDB 4.4 → 8.0
  • Atlas · replica sets · sharded
  • --oplog consistency
  • TLS / SRV aware

Encrypted before it leaves the box

Backups are compressed and encrypted with authenticated AES-256-GCM on your machine. Your S3 bucket or SFTP host only ever stores ciphertext — and a tampered dump fails loudly on restore instead of corrupting production.

  • scrypt-derived key
  • per-chunk nonce
  • secrets in OS keyring
  • checksum verified

Scheduled & monitored

A cron scheduler runs every job on time and records the result in a history log — with email alerts the moment one fails.

Offsite, in many places

Send each dump to local/NAS, Amazon S3, Wasabi, Backblaze B2, MinIO and SFTP at once, each with its own retention window.

Restore you can trust

One command downloads, decrypts, decompresses and mongorestores into a fresh database — so you verify before you promote.

How to use it

Set up an encrypted MongoDB backup in four screens

Real screenshots from the app — click a step to see it. The New Backup wizard asks one question at a time, so you never have to know MongoDB internals to get a safe, offsite backup.

Step 1 — choosing MongoDB as the database engine in the New Backup wizard Step 2 — entering host, port, username, password and database, with a Test connection button Step 3 — choosing a storage destination such as Local/NAS, AWS S3, Wasabi, Backblaze B2, MinIO or SFTP Step 4 — setting backup type, schedule, retention and toggling compress, encrypt and checksum verify Dashboard showing protected databases, backups this month, total stored and next run Backup history listing each run with database, destination, size, duration and status Settings screen with default destination, retention, encryption, verify-after-backup and notifications

Full step-by-step guide

Works everywhere MongoDB runs

Pick where your database lives

Managed or self-hosted, SQLBackup connects the right way — including the fiddly bits like SSL and cluster topology.

Replica set Atlas DocumentDB Sharded Cosmos DB Docker
Inside one backup

Watch a MongoDB backup ride the pipeline

Every backup streams through four stages — nothing is ever fully loaded into memory. Click a stage to dig in.

1 · mongodump
native tool
2 · Compress
streaming gzip
3 · Encrypt
AES-256-GCM
4 · Ship
S3 · SFTP · local
The part that matters

A backup you can't restore is just wasted disk

With SQLBackup, recovering a MongoDB database is one command — download, decrypt, verify, decompress, and mongorestore into a fresh database. Press play to watch every step.

# restore the latest analytics backup from S3 sqlbackup restore --job mongo_nightly_full \ --from amazon_s3 --database analytics_restored

Tip: schedule a monthly test restore — an untested backup isn't a backup yet.

Restore: analytics from Amazon S3
Locate backupfind the key in the destination
Downloadpull the encrypted object · 612 MB
Decrypt & verifyAES-256-GCM integrity check
Decompressrestore the original dump · 2.41 GB
mongorestorerebuild into analytics_restored
sqlbackup · encrypt · analytics
Plaintextanalytics_full_20260627.dump.gz
scrypt(password, salt) → 256-bit key · fresh nonce
Ciphertext…
FormatMAGIC(9) · SALT(16) · [ LEN · NONCE(12) · CT+TAG ] × N
256-bitAES key
96-bitnonce / chunk
64 KBchunk size
Security

Your MongoDB data leaves encrypted — or not at all

scrypt key derivation

Your password becomes a 256-bit key via scrypt with a random per-file salt — slow to brute-force by design.

Per-chunk authentication

GCM tags mean a corrupted or altered dump fails to decrypt — loudly — instead of restoring garbage into production.

Secrets in the OS keyring

Connection passwords live in Windows Credential Manager or the Linux Secret Service — never in a plaintext config file.

No middleman

No account, no phone-home. Backups go straight from your machine to your storage. We never see your data or your keys.

Read the security model
How it compares

SQLBackup vs a DIY cron job vs cloud snapshots

The honest trade-offs. SQLBackup is built for scheduled, encrypted, portable logical backups you actually control.

CapabilitySQLBackupDIY mongodump + cronManaged cloud snapshots
Automatic scheduling Built-in cronManual crontab Provider default
Client-side AES-256 encryption Always Plaintext dumpsAt rest, provider-held keys
Offsite to your own storage S3 · SFTP · NASScripts you maintainLocked to provider
Portable — restore anywhere Standard mongorestore mongorestore Same provider only
Failure alerts & history Email + log Fails silentlyBasic console
You hold the keys Always
Cost$5/mo, flatYour timeStorage + egress
Why trust it with your database

Built by engineers who've restored MongoDB under pressure

The SQLBackup team

Database & backend engineers · makers of SQLBackup

We built SQLBackup after living the nightmare ourselves: a production MongoDB database wiped by a bad deploy, and a "nightly backup" that had been failing silently for weeks. Every default in this tool — native dumps, encryption on, verify-after-backup, tested restores, failure alerts — comes from a lesson we learned the hard way so you don't have to.

Native MongoDB tooling AES-256-GCM · scrypt Documented backup format

Experience

Forged from real 3 a.m. restores, not a spec sheet. The workflow mirrors how experienced engineers actually recover MongoDB.

Battle-tested defaults

Expertise

Uses MongoDB's official tooling and audited cryptography (AES-256-GCM, scrypt) — plus real edge-case handling like SSL and cluster topology.

Native tools · audited crypto

Authoritativeness

An openly documented backup format and standard mongorestore output mean your data is never trapped in a black box — restore it anywhere.

Documented · no lock-in

Trustworthiness

No telemetry, no account for your data, no master key. Backups go straight from your machine to your storage — and pricing is one honest flat rate.

No phone-home · you keep the keys

Sources & further reading

SQLBackup builds directly on MongoDB's own, documented tools. Verify our approach against the official docs:

Loved by MongoDB teams

Teams that stopped worrying about backups

From solo founders to platform teams — here's what people say after switching to SQLBackup.

Sample testimonials shown for layout — replace with your own verified customer quotes before launch.

Who it's for

MongoDB backups that fit how you work

🚀

SaaS & startups

Protect the production database without hiring a DBA. Nightly encrypted dumps to S3, with an email the moment one fails.

🏢

Agencies

Give every client a tidy, encrypted, offsite MongoDB backup — and restore any of them to a new server in minutes.

🛡️

Compliance-minded teams

Encryption at rest by default, retention you control, and a clear, tested restore path auditors like to see.

🧪

Dev & data teams

Grab a consistent snapshot to spin up staging or run analysis — restore a production dump into a throwaway database safely.

☁️

Managed / cloud users

Own a portable copy of your managed MongoDB that isn't locked to one provider — restore it anywhere mongorestore runs.

🏠

Self-hosters

Back up your self-hosted apps' database to a NAS and a cheap cloud bucket. No subscription lock-in, no telemetry.

Technical specs

What's under the hood

Backup engine
mongodump --gzip --archive --oplog — a single consistent BSON archive
Restore
mongorestore --gzip --archive --oplogReplay into a database you name
Versions
MongoDB 4.4 → 8.0 · ships up-to-date database tools · version-aware dumps
Topology
Standalone, replica sets and sharded clusters (via mongos) · --oplog point-in-time consistency
Managed support
MongoDB Atlas via mongodb+srv:// · also works with DocumentDB & Cosmos DB (Mongo API)
Encryption
AES-256-GCM, key via scrypt, per-file salt, per-chunk nonce · secrets in OS keyring
Destinations
Local / NAS, Amazon S3, S3-compatible (Wasabi, Backblaze B2, MinIO), SFTP
Scheduling & retention
Manual / hourly / daily / weekly / monthly · keep-last-N per destination
Platforms
Windows 10/11 & Linux · desktop app and headless CLI/agent
MongoDB backup FAQ

Questions, answered

Yes. SQLBackup runs MongoDB's own mongodump with --gzip --archive (and --oplog on a replica set) to capture a single, consistent BSON archive. Backups are restored with mongorestore, so what you get is exactly what the vendor tooling produces.

MongoDB 4.4 through 8.0. The app ships up-to-date Database Tools so a server upgrade never silently breaks your backups.

Yes. It connects to MongoDB Atlas over a mongodb+srv:// connection with TLS, dumps a replica set with --oplog for a consistent snapshot, and backs up sharded clusters through mongos. It also works with DocumentDB and Cosmos DB's Mongo API.

Yes. The same app backs up MongoDB, PostgreSQL, MySQL and MariaDB — each with its own native dump tool — so one tool and one flat price covers every database on the machine.

Backups are encrypted client-side with authenticated AES-256-GCM before anything leaves your machine — the key is derived with scrypt and a random per-file salt. Connection secrets live in the OS keyring (Windows Credential Manager / Linux Secret Service), never in a plaintext config file.

Yes. With checksum verification enabled, each archive is hashed and checked after it's written, and the AES-256-GCM tag proves integrity again on restore — a corrupted or tampered archive fails loudly instead of restoring garbage.

On a replica set, SQLBackup passes --oplog so mongodump records the oplog while it runs and mongorestore --oplogReplay brings the data to a single consistent point in time — not a smear of writes taken over the dump window.

$5/month, billed annually as a single $60 payment — one plan, every feature, unlimited databases. Try it free for 15 days (no credit card), backed by a 14-day money-back guarantee, with no auto-renewal. See the pricing page.
One tool, every database

Also backs up your other databases

One flat price covers every engine on the machine. Explore the others:

PostgreSQL

pg_dump / pg_restore

MySQL

mysqldump

MariaDB

mariadb-dump

MongoDB

You're here

Back up MongoDB tonight

Try every feature free for 15 days — no card, no charge. Keep it for $5/month, billed annually, with a 14-day money-back guarantee on your purchase.

Free Download See pricing
15-day free trial 14-day money-back No auto-renewal