← Back to glossary
💾

Data Encryption at Rest

Encryption

Secure Storage Cloud Encryption File Encryption Encryption Key

Storage-layer encryption with key control.

Definition

Encryption at rest encrypts stored data (filesystems, databases, backups) using cryptographic keys, often combined with access controls and key management.

In plain English Storage-layer encryption with key control.

Why this matters

Why it matters: It reduces impact of physical theft and unauthorized storage access, and supports compliance requirements.

Example

Example: Full-disk encryption (FDE) with keys protected by a secure enclave or TPM.