Droplet "native" storage: is it encrypted similarly to Block Storage Volumes?

September 22, 2019 200 views
DigitalOcean Security Block Storage

Droplet “native” storage: is it encrypted similarly to Block Storage Volumes?

Excerpt from https://www.digitalocean.com/docs/volumes/overview/ :

Encryption: Volumes are encrypted using the LUKS (Linux Unified Key Setup) specification. The entire storage cluster is encrypted, which ensures that snapshots of volumes are also encrypted at rest.”

If it matters, we currently employ Ubuntu 18.04 on our VPSes, but might use additional OSes in the future.

2 Answers

Hi there @johnnyutahh / @johnnyutahh1,

We do not encrypt Droplet disks in the same way as Block Storage volumes as you described.

However, you could employ LUKS encryption or other forms of encryption on your Droplet’s disk or volumes of the disk as you manage the system directly with root access.

Hope that helps!
- Matt.

I posted the above question from a related-but-different account. I reply here under my proper account simply as a placeholder so I can track this question/topic (from my proper account).

Have another answer? Share your knowledge.