Encryption at Rest
Definition
Encryption of stored data protects information on devices, in databases, and in backups.
The encryption of data on storage media, databases, or backups outside of active transmission.
Simply explained
Stored files lie like in a locked cabinet. Anyone who wants to read them needs the appropriate key.
Why it matters in practice
The term contributes to secure, maintainable, and high-performance web applications as well as resilient technical decisions.
Example from business
A company encrypts notebooks and backups and separates data from key access.
Limits and pitfalls
- Disk encryption does not protect against authorized compromised processes; keys, snapshots, and exports must be included.
Origin & history
Disk, file, and database encryption have been widely used with standardized key management.
Use in mid-sized companies
- Possible example: A company encrypts notebooks and backups and separates data from key access.
Frequently asked questions
What does encryption of stored data mean?
The encryption of data on storage media, databases, or backups outside of active transmission. What should be considered? Disk encryption does not protect against authorized compromised processes; keys, snapshots, and exports must be included.
Sources
- NIST SP 800-111 · NIST SP 800-111
Source checked on 10.10.2026. Editorial application examples are hypothetical; no evidence of real customer results.
Editorially reviewed on: