Encrypt a volume

Encrypting a volume protects its data at rest, so it stays unreadable even if the underlying storage is compromised. Encryption uses full-disk encryption and is transparent: you run your applications exactly as before. You can turn encryption on only when you create the volume.

Before you begin

• A MyAccount account; you encrypt as part of creating the volume.

Create an encrypted volume

1. Open Storage > Volumes and click Create Volume.
2. Enter the volume name, choose the size and plan.
3. Check Enable Encryption.
4. (Optional) Enter a passphrase for a second layer of protection.
5. Click Launch Volume.

An encrypted volume shows a lock (encrypted) icon beside its name in the volume list.

How encryption behaves for snapshots

Snapshots of an encrypted volume are encrypted too, so your backups stay protected. To encrypt a new volume created from that snapshot, check Enable Encryption again.

You attach and use an encrypted volume like any other. The one difference: only unencrypted volumes can be exported to Object Storage; see Export a volume.