Enable and Manage Encryption

Server-side encryption (SSE) protects your data by encrypting it before Backblaze B2 Cloud Storage stores it on disk.

You can enable SSE using the enterprise web console when you create a bucket or on an existing bucket. You can enable or disable encryption on a bucket at any time. However, files that were encrypted while the feature was enabled remain encrypted.

Enable or Disable Encryption on an Existing Bucket

1. Sign in to your Backblaze organization.
2. In the left navigation menu, select Buckets.
3. Select the bucket name.
4. Click Settings.
5. On the General tab, enable or disable Encryption.
6. Click Save.

All files that you upload to this bucket from now on will be encrypted by default. Encrypted objects are excluded from snapshots.

Verify Encrypted Files

1. In the left navigation menu, select Buckets.
2. Select the bucket name.
3. On the Overview tab, in the Bucket Overview section, verify that Encryption is set to Enabled.
4. Alternatively, select the Objects tab and select an object name.
5. In the Technical Info section, verify that Encryption is set to AES256 (SSE-B2).