Restic – has a native copy command built specifically for this purpose because it copies snapshots from one repository to another while re-encrypting the data using the target repository’s unique key this allows you to keep a secondary backup with a different password
Initialize the secondary target repository
# restic -r /path/to/backup-repo init
Copy the snapshots from your primary repository
# restic -r /path/to/backup-repo copy –from-repo /path/to/primary-repo
Pros: Secure (uses a different password) and you can selectively copy only the latest or specific snapshots
Cons: Takes more CPU power than a simple file transfer because data is re-encrypted