---
title: "Encrypt a volume"
description: "Create an encrypted Block Storage volume so its data is protected at rest, with encryption carried through snapshots."
content_type: "how-to"
product: "volumes"
platform: "MyAccount"
url: "/myaccount/volumes/how-to/encrypt-a-volume/"
topic: ["protect"]
relationships: {"requires":["/myaccount/volumes/how-to/create-a-volume/"]}
---

# Encrypt a volume

Encrypting a volume protects its data at rest, so it stays unreadable even if the underlying storage
is compromised. Encryption uses full-disk encryption and is transparent: you run your applications
exactly as before. You can turn encryption on only when you create the volume.

## Before you begin

- A MyAccount account; you encrypt as part of creating the volume.

## Create an encrypted volume

1. Open **Storage > Volumes** and click **Create Volume**.
2. Enter the volume name, choose the size and plan.
3. Check **Enable Encryption**.
4. (Optional) Enter a passphrase for a second layer of protection.
5. Click **Launch Volume**.

An encrypted volume shows a lock (encrypted) icon beside its name in the volume list.

## How encryption behaves for snapshots

Snapshots of an encrypted volume are encrypted too, so your backups stay protected. To encrypt a new
volume created from that snapshot, check **Enable Encryption** again.

You attach and use an encrypted volume like any other. The one difference: only unencrypted volumes
can be exported to Object Storage; see [Export a
volume](/myaccount/volumes/how-to/export-a-volume/).