{"id":113337,"date":"2026-08-27T06:00:00","date_gmt":"2026-08-27T13:00:00","guid":{"rendered":"https:\/\/www.backblaze.com\/blog\/?p=113337"},"modified":"2026-08-26T13:41:26","modified_gmt":"2026-08-26T20:41:26","slug":"backblaze-b2-to-encrypt-new-uploads-by-default","status":"publish","type":"post","link":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/","title":{"rendered":"Backblaze B2 To Encrypt New Uploads by Default"},"content":{"rendered":"\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"583\" src=\"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1-1024x583.png\" alt=\"An image of the Backblaze logo on a gradient background.\" class=\"wp-image-112936\" srcset=\"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1-1024x583.png 1024w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1-300x171.png 300w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1-768x437.png 768w, https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1.png 1440w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\"><em>Always-on SSE-B2 brings AES-256 encryption at rest to every new upload and destination copy\u2014with no application changes, additional cost, or performance impact.<\/em><\/h4>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Security works best when it doesn\u2019t depend on one more checkbox. Starting September 14, 2026, we\u2019re making server-side encryption the automatic baseline for Backblaze B2 Cloud Storage.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Backblaze B2 will automatically encrypt all newly uploaded and copied object data at rest using Server-Side Encryption with Backblaze-managed keys (SSE-B2) and AES-256. The default applies immediately to new buckets. Existing buckets will receive the default gradually; once enabled for a bucket, newly uploaded and copied objects use SSE-B2 automatically. If an application doesn\u2019t specify an encryption method, B2 handles it automatically.<\/p>\n\n\n\n<p class=\"has-purple-background-color has-background wp-block-paragraph\"><strong>Here\u2019s the TL;DR: <\/strong>You don\u2019t need to update your application, add an encryption header, or turn on a bucket setting. There is no additional charge for SSE-B2 and no impact on upload or download performance. New uploads are encrypted by default, existing objects keep their current encryption state, and SSE-C remains available when you want to provide your own key for an individual object.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Secure by Default, Without Extra Work<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.backblaze.com\/docs\/en\/cloud-storage-server-side-encryption\" target=\"_blank\" rel=\"noreferrer noopener\">SSE-B2<\/a> encrypts object data at rest with AES-256 while Backblaze manages the encryption keys. Until now, customers could choose to enable SSE-B2 for a bucket or request it for an individual upload. With always-on encryption, SSE-B2 becomes the baseline for every new upload and destination copy when SSE-C is not explicitly requested.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That means fewer settings to manage, fewer opportunities for configuration drift, and a stronger security baseline across your storage environment. Teams can meet encryption-at-rest requirements without building another check into every application or deployment process. Server-side encryption cannot be disabled for new writes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For new buckets, the default applies immediately. Existing buckets receive it gradually; once enabled for a bucket, new uploads and destination copies receive SSE-B2 automatically. Buckets already configured for SSE-B2 remain configured as they are, and requests that explicitly use SSE-C continue to use SSE-C.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What This Means for Your Existing Workflows<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The best kind of security improvement is one that doesn\u2019t force you to rebuild what already works. Always-on encryption is a behavioral update, not a new API contract. Existing integrations can keep using the same upload, copy, multipart-upload, and download operations they use today. B2 automatically decrypts SSE-B2 data for authorized reads, so the way you access objects does not change either.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">See the Default in Action<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The important part of these examples is what is missing: Neither upload explicitly requests SSE-B2. After this update, Backblaze applies it automatically.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">S3-Compatible API: Upload Without an Encryption Flag<\/h4>\n\n\n\n<pre class=\"wp-block-preformatted\">aws s3api put-object \\<br \/>  --profile backblaze \\<br \/>  --endpoint-url https:\/\/s3.YOUR-REGION.backblazeb2.com \\<br \/>  --bucket YOUR-BUCKET-NAME \\<br \/>  --key hello.txt \\<br \/>  --body .\/hello.txt<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">There is no <code>--server-side-encryption<\/code> option in the command. B2 still encrypts the new object with SSE-B2. In S3-compatible responses, that effective encryption is represented as AES256.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">aws s3api get-bucket-encryption \\<br \/>&nbsp; --profile backblaze \\<br \/>&nbsp; --endpoint-url https:\/\/s3.YOUR-REGION.backblazeb2.com \\<br \/>&nbsp; --bucket YOUR-BUCKET-NAME<br \/><br \/># Response includes<br \/>\"SSEAlgorithm\": \"AES256\"<\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">B2 Native API: Omit the SSE-B2 Header<\/h4>\n\n\n\n<pre class=\"wp-block-preformatted\">curl \"$UPLOAD_URL\" \\<br \/>&nbsp; -H \"Authorization: $UPLOAD_AUTHORIZATION_TOKEN\" \\<br \/>&nbsp; -H \"X-Bz-File-Name: hello.txt\" \\<br \/>&nbsp; -H \"Content-Type: text\/plain\" \\<br \/>&nbsp; -H \"X-Bz-Content-Sha1: $SHA1_OF_FILE\" \\<br \/>&nbsp; --data-binary @hello.txt<br \/><br \/># Response includes<br \/>\"serverSideEncryption\": {\"mode\": \"SSE-B2\", \"algorithm\": \"AES256\"}<\/pre>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">The request does not include <code>X-Bz-Server-Side-Encryption<\/code>. The response still reports SSE-B2 with AES256 because it is now the effective default.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Using the S3-Compatible API?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Requests that omit encryption headers receive SSE-B2 automatically, reported through the S3-compatible AES256 value. <code>PutObject<\/code>, <code>CopyObject<\/code>, and multipart uploads all use the new default for the destination object. Valid SSE-C headers still take precedence.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Using the B2 Native API?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You can continue to omit SSE-B2 fields and headers. New uploads, large-file uploads, and destination copies use SSE-B2 by default. Applications can still explicitly request SSE-B2, but doing so is no longer necessary to receive encryption at rest.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Using an SDK, CLI, Integration, or the Web Console?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Because the protection is applied by B2, tools that already upload to Backblaze B2 benefit automatically. No special encryption flag, SDK upgrade, CLI update, or integration change is required. The Backblaze web consoles will show SSE-B2 or AES256 as the effective bucket default and continue to display the encryption actually used for each object.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SSE-C Is Still Available<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Some organizations need direct control over the key used for a particular object. SSE-C continues to support that workflow. When a request includes valid SSE-C headers, Backblaze uses the customer-provided AES-256 key instead of SSE-B2 for that object.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As before, Backblaze does not retain the customer key. Customers using SSE-C are responsible for protecting and retaining their keys; a lost key cannot be recovered by Backblaze. You can also continue to encrypt data on the client side before uploading it. SSE-KMS is not part of this update.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What About Objects Already Stored in B2?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Always-on encryption is not retroactive. Objects already stored in a bucket keep the encryption state they had when they were written. We are not rewriting customer data in the background or changing the encryption metadata of historical objects.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you want an older unencrypted object to use SSE-B2, upload it again or create a new destination copy. The new object is encrypted using the always-on default. Object-information and download responses continue to describe the encryption actually used for each object.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why Always-On Encryption Matters<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Encryption at rest is a foundational part of modern data protection. Making it automatic helps teams establish a consistent security baseline without adding another deployment step or relying on every application to make the same configuration choice.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It also keeps the developer experience simple. Teams can focus on moving, protecting, and using their data while Backblaze applies the default protection behind the scenes\u2014with no added encryption charge or performance trade-off. That\u2019s the kind of cloud storage experience we want to deliver: secure by design, straightforward to operate, and compatible with the tools customers already use.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-1787776796628\"><strong class=\"schema-faq-question\">Do I need to change my application?<\/strong> <p class=\"schema-faq-answer\">No. Applications that omit encryption settings automatically receive SSE-B2 for new uploads and destination copies. Existing request formats remain valid.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1787776811012\"><strong class=\"schema-faq-question\">Can I disable server-side encryption for new uploads?<\/strong> <p class=\"schema-faq-answer\">No. SSE-B2 is the effective default when SSE-C is not requested. Clearing or deleting an explicit bucket encryption configuration does not create an unencrypted default.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1787776823468\"><strong class=\"schema-faq-question\">Does this encrypt objects that are already stored?<\/strong> <p class=\"schema-faq-answer\">No. Existing objects retain their original encryption state. Uploading or copying an object again creates a new object that uses the always-on default.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1787776838446\"><strong class=\"schema-faq-question\">Can I still use my own encryption key?<\/strong> <p class=\"schema-faq-answer\">Yes. Supply the required SSE-C headers when you upload, copy, or access an SSE-C object. SSE-C takes precedence over the SSE-B2 default for that object.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1787776849638\"><strong class=\"schema-faq-question\">Does always-on encryption cost more or affect performance?<\/strong> <p class=\"schema-faq-answer\">No. SSE-B2 is applied at no additional charge and has no impact on upload or download performance. Normal Backblaze B2 storage and API charges still apply.<\/p> <\/div> <\/div>\n<\/div><\/div>\n\n\n\n<div style=\"height:25px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Available Starting September 14, 2026<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Always-on SSE-B2 is available on September 14, 2026 for new buckets in every Backblaze B2 region. Existing buckets will be enabled gradually. For most customers, there\u2019s nothing to turn on and nothing to migrate: once the default is enabled for a bucket, every new upload and destination copy receives SSE-B2 automatically unless you explicitly request SSE-C.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ready to put secure-by-default cloud storage to work? <a href=\"https:\/\/www.backblaze.com\/cloud-storage\" target=\"_blank\" rel=\"noreferrer noopener\">Get started with Backblaze B2 Cloud Storage<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Starting September 14, Backblaze B2 will automatically encrypt every new upload and destination copy at rest with AES-256. Always-on SSE-B2 strengthens security without application changes, added costs, or performance impact, while preserving SSE-C for customer-managed encryption keys when required instead.<\/p>\n","protected":false},"author":168,"featured_media":112936,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":"","jetpack_post_was_ever_published":false},"categories":[7,434,438,1],"tags":[468],"class_list":["post-113337","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-storage","category-featured-1","category-featured-cloud-storage","category-uncategorized","tag-b2cloud","entry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Backblaze B2 Adds Default Encryption for New Uploads<\/title>\n<meta name=\"description\" content=\"Backblaze B2 adds default AES-256 encryption to new uploads and copies, with no application changes, added cost, or performance impact.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Backblaze B2 Adds Default Encryption for New Uploads\" \/>\n<meta property=\"og:description\" content=\"Backblaze B2 adds default AES-256 encryption to new uploads and copies, with no application changes, added cost, or performance impact.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/\" \/>\n<meta property=\"og:site_name\" content=\"Backblaze Blog | Cloud Storage &amp; Cloud Backup\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/backblaze\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-27T13:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1440\" \/>\n\t<meta property=\"og:image:height\" content=\"820\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Backblaze\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@backblaze\" \/>\n<meta name=\"twitter:site\" content=\"@backblaze\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Backblaze\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Backblaze B2 Adds Default Encryption for New Uploads","description":"Backblaze B2 adds default AES-256 encryption to new uploads and copies, with no application changes, added cost, or performance impact.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/","og_locale":"en_US","og_type":"article","og_title":"Backblaze B2 Adds Default Encryption for New Uploads","og_description":"Backblaze B2 adds default AES-256 encryption to new uploads and copies, with no application changes, added cost, or performance impact.","og_url":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/","og_site_name":"Backblaze Blog | Cloud Storage &amp; Cloud Backup","article_publisher":"https:\/\/www.facebook.com\/backblaze","article_published_time":"2026-08-27T13:00:00+00:00","og_image":[{"width":1440,"height":820,"url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1.png","type":"image\/png"}],"author":"Backblaze","twitter_card":"summary_large_image","twitter_creator":"@backblaze","twitter_site":"@backblaze","twitter_misc":{"Written by":"Backblaze","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#article","isPartOf":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/"},"author":{"name":"Backblaze","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/person\/c4aeb635459cb08cd0b8045ddac13173"},"headline":"Backblaze B2 To Encrypt New Uploads by Default","datePublished":"2026-08-27T13:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/"},"wordCount":1148,"commentCount":7,"publisher":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#primaryimage"},"thumbnailUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1.png","keywords":["B2Cloud"],"articleSection":["Cloud Storage","Featured","Featured-Cloud Storage"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#respond"]}]},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/","url":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/","name":"Backblaze B2 Adds Default Encryption for New Uploads","isPartOf":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#primaryimage"},"image":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#primaryimage"},"thumbnailUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1.png","datePublished":"2026-08-27T13:00:00+00:00","description":"Backblaze B2 adds default AES-256 encryption to new uploads and copies, with no application changes, added cost, or performance impact.","breadcrumb":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#breadcrumb"},"mainEntity":[{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776796628"},{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776811012"},{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776823468"},{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776838446"},{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776849638"}],"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#primaryimage","url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1.png","contentUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1.png","width":1440,"height":820,"caption":"An image of the Backblaze logo on a gradient background."},{"@type":"BreadcrumbList","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Backblaze B2 To Encrypt New Uploads by Default"}]},{"@type":"WebSite","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#website","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/","name":"Backblaze Cloud Solutions Blog","description":"Cloud Storage &amp; Cloud Backup","publisher":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization","name":"Backblaze","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/www.backblaze.com\/blog\/wp-content\/uploads\/2017\/12\/backblaze_icon_transparent.png?fit=512%2C512&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.backblaze.com\/blog\/wp-content\/uploads\/2017\/12\/backblaze_icon_transparent.png?fit=512%2C512&ssl=1","width":512,"height":512,"caption":"Backblaze"},"image":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/backblaze","https:\/\/x.com\/backblaze","https:\/\/www.youtube.com\/user\/Backblaze","https:\/\/en.wikipedia.org\/wiki\/Backblaze"]},{"@type":"Person","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/person\/c4aeb635459cb08cd0b8045ddac13173","name":"Backblaze","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/03\/BB-flame-icon-300x300-1-150x150.jpg","url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/03\/BB-flame-icon-300x300-1-150x150.jpg","contentUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/03\/BB-flame-icon-300x300-1-150x150.jpg","caption":"Backblaze"},"description":"Backblaze is the cloud storage innovator delivering a modern alternative to traditional cloud providers. We offer high-performance, secure cloud object storage that customers use to develop applications, manage media, secure backups, build AI workflows, protect from ransomware, and more. Backblaze helps businesses break free from the walled gardens that traditional providers lock customers into, enabling them to use their data in open cloud workflows with the providers they prefer at a fraction of the cost. Headquartered in San Mateo, CA, Backblaze (NASDAQ: BLZE) was founded in 2007 and serves over 500,000 customers in 175 countries around the world. For more information, please go to www.backblaze.com.","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/author\/team\/"},{"@type":"Question","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776796628","position":1,"url":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776796628","name":"Do I need to change my application?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"No. Applications that omit encryption settings automatically receive SSE-B2 for new uploads and destination copies. Existing request formats remain valid.","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776811012","position":2,"url":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776811012","name":"Can I disable server-side encryption for new uploads?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"No. SSE-B2 is the effective default when SSE-C is not requested. Clearing or deleting an explicit bucket encryption configuration does not create an unencrypted default.","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776823468","position":3,"url":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776823468","name":"Does this encrypt objects that are already stored?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"No. Existing objects retain their original encryption state. Uploading or copying an object again creates a new object that uses the always-on default.","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776838446","position":4,"url":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776838446","name":"Can I still use my own encryption key?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Yes. Supply the required SSE-C headers when you upload, copy, or access an SSE-C object. SSE-C takes precedence over the SSE-B2 default for that object.","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776849638","position":5,"url":"https:\/\/www.backblaze.com\/blog\/backblaze-b2-to-encrypt-new-uploads-by-default\/#faq-question-1787776849638","name":"Does always-on encryption cost more or affect performance?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"No. SSE-B2 is applied at no additional charge and has no impact on upload or download performance. Normal Backblaze B2 storage and API charges still apply.","inLanguage":"en-US"},"inLanguage":"en-US"}]}},"jetpack_featured_media_url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2026\/04\/Generic-Product-updates-Blog-Header-1440x820-2-1.png","_links":{"self":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts\/113337","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/users\/168"}],"replies":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/comments?post=113337"}],"version-history":[{"count":10,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts\/113337\/revisions"}],"predecessor-version":[{"id":113352,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts\/113337\/revisions\/113352"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/media\/112936"}],"wp:attachment":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/media?parent=113337"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/categories?post=113337"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/tags?post=113337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}