SecurityBeginner
Encryption at Rest
Pronunciationen-KRIP-shun at REST
Definition
Encryption at rest is the process of protecting data stored on physical media, such as hard drives or databases, using encryption algorithms. This ensures that if the physical storage is stolen or accessed, the data remains unreadable without the correct decryption key.
Where you hear it
In security audits, cloud infrastructure configuration, and compliance discussions regarding data privacy.
Examples
We must enable encryption at rest for our database backups.
The security policy requires encryption at rest for all sensitive user files.
Common mistake
Confusing it with encryption in transit, which protects data while it is being moved across a network rather than when it is stored on a disk.