Question

Droplet "native" storage: is it encrypted similarly to Block Storage Volumes?

Posted on September 22, 2019
Block Storage Security DigitalOcean
Asked by Johnny Utahh1

Droplet “native” storage: is it encrypted similarly to Block Storage Volumes?

Excerpt from https://www.digitalocean.com/docs/volumes/overview/ :

“Encryption: Volumes are encrypted using the LUKS (Linux Unified Key Setup) specification. The entire storage cluster is encrypted, which ensures that snapshots of volumes are also encrypted at rest.”

If it matters, we currently employ Ubuntu 18.04 on our VPSes, but might use additional OSes in the future.

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Matt Cowley • September 23, 2019

Accepted Answer

Hi there @johnnyutahh / @johnnyutahh1,

We do not encrypt Droplet disks in the same way as Block Storage volumes as you described.

However, you could employ LUKS encryption or other forms of encryption on your Droplet’s disk or volumes of the disk as you manage the system directly with root access.

Hope that helps! - Matt.

Johnny Utahh • September 23, 2019

I posted the above question from a related-but-different account. I reply here under my proper account simply as a placeholder so I can track this question/topic (from my proper account).