In this guide, you will learn how to automatically back up your pfSense firewall using the free AutoConfigBackup (ACB) service provided by Netgate. While manual local backups are possible via Diagnostics > Backup and Restore, ACB offers a secure, encrypted cloud alternative.
The AutoConfigBackup service is built into pfSense Community Edition but must be explicitly enabled and configured.
Log in to your pfSense web interface. Navigate to Services and select AutoConfigBackup.
In the "Settings" tab, configure the following fields:
The Device Key is unique to your installation. This key works for both physical hardware and virtual machines.
Important: Copy your Device Key and save it in a secure location, such as a password manager. You will need this key to restore your configuration if you reinstall pfSense.
Next, set an Encryption Password. This password encrypts your data before it is sent to Netgate's servers. Choose a strong password and verify it.
You can set a "Hint/Identifier" (e.g., "TSS firewall one") to help identify the device if you need support or have multiple firewalls.
Once configured, click Save.
Once enabled, the system will back up automatically on changes, but you can also trigger manual backups and restore from the cloud.
Go to the Backup Now tab within the AutoConfigBackup menu.
To verify the backup works, you can simulate a failure (e.g., deleting a dashboard widget). To recover:
The system will confirm that the configuration has been reverted. While some changes take effect immediately (like dashboard widgets), it is recommended to reboot the firewall to fully activate critical changes like rules or interface assignments.