Test recovering your encryption key, because losing it bricks every backup

Test recovering your encryption key, because losing it bricks every backup
Encrypted backups plus a lost key equals a very secure pile of garbage. Drill:
— Find where your decryption key actually lives, right now, from memory
— Confirm it is NOT stored on the server it protects
— Store a copy in a separate password manager and one offline location
— Restore a backup using ONLY the offline key copy
— Rotate the key and confirm old backups still decrypt with the old one
Most people protect data with a key they'd lose in the same fire. Change my mind.