Enable and Manage Encryption

Server-side encryption (SSE) protects your data by encrypting it before Backblaze B2 Cloud Storage stores it on disk.

SSE can be enabled when a bucket is created or on an existing bucket.

SEE can be enabled or disabled on a bucket at any time. However, files that were encrypted while the feature was enabled remain encrypted.

These settings can be configured only by users with bucket-management permissions (Administrator or Bucket Creator with appropriate scope). They are not visible to users who only have object-level roles.

Enable or Disable Encryption on an Existing Bucket

1. Sign in to your Backblaze organization.
2. In the left navigation menu, select Buckets.
3. Select the bucket name.
4. Click Settings.
5. On the General tab, enable or disable Encryption.
6. Click Save.

All files that you upload to this bucket from now on will be encrypted by default. Encrypted objects are excluded from snapshots.

Verify Encrypted Files

1. In the left navigation menu, select Buckets.
2. Select the bucket name.
3. On the Overview tab, in the Bucket Overview section, verify that Encryption is set to Enabled.
4. Alternatively, select the Objects tab and select an object name.
5. In the Technical Info section, verify that Encryption is set to AES256 (SSE-B2).