Error Code Reference

BE-1001  Invalid credentials
         The email or password is incorrect.
         Resolution: Verify your email and password. Reset password if needed.

BE-1002  MFA verification failed
         The TOTP code is incorrect or expired.
         Resolution: Ensure your authenticator app's time is synced. Wait for a new code.

BE-1003  Session expired
         Your access token has expired and could not be refreshed.
         Resolution: Sign in again. If using CLI, run: backupengine auth login

BE-1004  Device not registered
         This device has not been registered with your account.
         Resolution: Run: backupengine auth register-device

BE-1005  Account locked
         Too many failed login attempts. Account locked for 30 minutes.
         Resolution: Wait 30 minutes and try again, or contact support.

BE-1006  MFA not configured
         MFA is required but has not been set up on this account.
         Resolution: Sign in to the portal and configure MFA in Settings → Security.

BE-2001  Backup set not found
         The specified backup set does not exist.
         Resolution: Check the name with: backupengine backup-set list

BE-2002  Source path not accessible
         A folder in the backup set cannot be read.
         Resolution: Verify the folder exists and the agent has read permissions.

BE-2003  File locked by another process
         A file could not be read because it is locked.
         Resolution: The agent retries automatically. If persistent, close the locking application.

BE-2004  Backup session initialization failed
         The server could not create a backup session.
         Resolution: Check internet connectivity. Retry after a few minutes.

BE-2005  Chunk upload failed
         An encrypted chunk could not be uploaded to storage.
         Resolution: Check network connection. The agent retries automatically with backoff.

BE-2006  Backup cancelled by user
         The backup was stopped manually.
         Resolution: No action needed. Run the backup again when ready.

BE-2007  Ransomware activity detected
         Suspicious file changes matching ransomware patterns were found.
         Resolution: Scan your system with antivirus. See the Ransomware Protection docs.

BE-2008  Schedule conflict
         Two backup sets are scheduled to run at the same time.
         Resolution: Adjust schedules so they do not overlap, or enable concurrent backups.

BE-3001  Restore point not found
         The specified point-in-time does not exist in the backup history.
         Resolution: List available points: backupengine restore list-points --backup-set <name>

BE-3002  Chunk integrity verification failed
         A downloaded chunk failed GCM authentication or hash verification.
         Resolution: Retry the download. If persistent, the chunk may be corrupted in storage.

BE-3003  Decryption failed
         The chunk could not be decrypted. Wrong passphrase or corrupted key.
         Resolution: Verify your encryption passphrase. If you changed it recently, use the previous one.

BE-3004  Destination path not writable
         The restore destination directory cannot be written to.
         Resolution: Check permissions on the destination folder.

BE-3005  Insufficient disk space
         Not enough free space on the destination drive to complete the restore.
         Resolution: Free up disk space or choose a different destination.

BE-3006  File version expired
         The requested file version has been removed by the retention policy.
         Resolution: Choose a version within the retention window.

BE-4001  Connection timeout
         Could not connect to BackupEngine servers within the timeout period.
         Resolution: Check internet connectivity and firewall rules (HTTPS port 443).

BE-4002  DNS resolution failed
         Could not resolve api.backupengine.com or storage endpoints.
         Resolution: Check DNS settings. Try a public DNS resolver (8.8.8.8 or 1.1.1.1).

BE-4003  Proxy authentication failed
         The configured proxy server rejected the agent's credentials.
         Resolution: Verify proxy settings in Settings → Network → Proxy.

BE-4004  SSL/TLS certificate error
         The server's TLS certificate could not be verified.
         Resolution: Check system date/time. Update OS root certificates.

BE-5001  Storage quota exceeded
         Your account has reached its storage limit.
         Resolution: Delete unused backup sets, reduce retention, or upgrade your plan.

BE-5002  Presigned URL expired
         The upload/download URL expired before the transfer completed.
         Resolution: The agent requests a new URL automatically. If persistent, check for slow network.

BE-5003  Storage region unavailable
         Your selected storage region is experiencing an outage.
         Resolution: Wait for the region to recover. Check status.backupengine.com for updates.

BE-6001  Passphrase required
         An encryption passphrase is required but was not provided.
         Resolution: Enter your passphrase when prompted, or configure it in the agent.

BE-6002  Key derivation failed
         Argon2id key derivation failed (usually insufficient memory).
         Resolution: Ensure the system has at least 128 MB of free RAM for key derivation.

BE-6003  Encryption key not found
         The Data Encryption Key (DEK) could not be retrieved or unwrapped.
         Resolution: Verify your passphrase. If the DEK was rotated, ensure you have the current passphrase.

BE-6004  GCM authentication tag mismatch
         A chunk failed AES-256-GCM authentication during decryption.
         Resolution: The chunk has been modified in storage. Re-download and retry.

BE-6005  Key rotation in progress
         A key rotation operation is currently in progress.
         Resolution: Wait for the rotation to complete before starting new backups.