Cannot decrypt encrypted TrueNAS backup to PCloud

Help and Support
1

What is the problem you are having with rclone?

I have TrueNAS Cloud Sync pushing to PCloud (using Rclone)
The backup is encrypted with Password and Salt, and filenames are encrypted [standard]

I am using Rclone on Windows 11 (both CMD and web GUI)
I can access my PCloud and list the encrypted files and create new (unencrypted) files

I can create a crypt which seems to be able to see encrypted files/folders, but can’t decrypt them (encrypted file names from log match names in PCloud)

Password and salt are stored in a password manager, and are also readable from TrueNAS GUI
I have tried swapping password and salt to see if maybe that was the issue with no success

Run the command 'rclone version' and share the full output of the command.

rclone v1.73.4

  • os/version: Microsoft Windows 11 Home 23H2 23H2 (64 bit)
  • os/kernel: 10.0.22631.6199 (x86_64)
  • os/type: windows
  • os/arch: amd64
  • go/version: go1.25.9
  • go/linking: static

Which cloud storage system are you using? (eg Google Drive)

PCloud (via TrueNAS Cloud Sync)

The command you were trying to run (eg rclone copy /tmp remote:tmp)

///

 rclone lsd Crypt_App_Data: -vv --log-file=C:\Users\user\Downloads\test.txt

Please run 'rclone config redacted' and share the full output. If you get command not found, please make sure to update rclone.

///

[Crypt_App_Data]
type = crypt
password = XXX
password2 = XXX
remote = rclone_pcloud_config:/TrueNAS_App_Data

[rclone_pcloud_config]
type = pcloud
hostname = eapi.pcloud.com
token = XXX

A log from the command that you were trying to run with the -vv flag

///

2026/04/15 02:23:03 DEBUG : rclone: Version "v1.73.4" starting with parameters ["C:\\windows\\system32\\rclone.exe" "lsd" "-vv" "Crypt_App_Data:" "--log-file=C:\\Users\\user\\Downloads\\test.txt"]
2026/04/15 02:23:03 DEBUG : Creating backend with remote "Crypt_App_Data:"
2026/04/15 02:23:03 DEBUG : Using config file from "C:\\Users\\user\\AppData\\Roaming\\rclone\\rclone.conf"
2026/04/15 02:23:03 DEBUG : Creating backend with remote "rclone_pcloud_config:/TrueNAS_App_Data"
2026/04/15 02:23:04 DEBUG : fs cache: renaming cache item "rclone_pcloud_config:/TrueNAS_App_Data" to be canonical "rclone_pcloud_config:TrueNAS_App_Data"
2026/04/15 02:23:04 NOTICE: 0nj34sn7okqphqn5n27okr5cgg: Skipping undecryptable dir name: bad PKCS#7 padding - not all the same
2026/04/15 02:23:04 NOTICE: 2jk5meuna6qac61dlbsin35bao: Skipping undecryptable dir name: bad PKCS#7 padding - not all the same
2026/04/15 02:23:04 NOTICE: 3v7rj6jkef88nj5b2oj9tuacfc: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: 53uo9oubp83v41mns2apqe8v10: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: 6i5g9negn6e72g9ah258b2lgu4: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: 8cm525uli397eg50il38o9ad68: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: a6dmfoc7ot0t1d518m6bea21c8: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: bqoafrecsk2stadt1sf9968qls: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: br8bsm812aindcagl7e2a88j2g: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: c0jdrkgge43ugms671ivbravlou5ep670h1tvp0gads27dkqncd0: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: h344eu382b7dvmnduisfrfof1o: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: kuvgl2c34lqndtav2up58555ug: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: m7rnp3le70gf1u8fu8q1ovts2o: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: na0u3rb41l5hd2u0q0ih2v25mc: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: rgmfapo865rg27h67khjot7u0c: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 NOTICE: v1ho8uotj1qh5oq1m614a7o9l8: Skipping undecryptable dir name: bad PKCS#7 padding - too long
2026/04/15 02:23:04 DEBUG : 3 go routines active

///
2

Rclone crypt remotes use an obscure mechanism for the rclone.conf password and password2 fields. ensure your password and salt stored in your password manager are not the obscured values stored in the rclone.conf from your TrueNAS configuration. if they are you can update the rclone.conf value located in %APP_DATA% or your User directory somewhere in a hidden folder to use the same rclone.conf from your TrueNAS server.

Those errors just mean that the password and salt you're trying are not correct. I’d also be certain the rclone version used to create the backups isn’t a really old version of rclone that had a bug with the encrypt remote type that was patched shortly after it was discovered. I think it was like an rclone v1.5x.x or something but don’t recall. its on the rclone.org doc page though about that version range. your issue is not likely related to that though.