# Encrypting data at rest

**URL:** <https://meta.discourse.org/t/encrypting-data-at-rest/23693>\
**Category:** Sysadmins\
**Tags:** explanation\
**Created:** [January 5, 2015, 10:13pm UTC](https://meta.discourse.org/t/encrypting-data-at-rest/23693 "2015-01-05T22:13:45Z")\
**Posts on this page:** 1\
**Showing post:** 11

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [March 3, 2019, 9:13pm UTC](https://meta.discourse.org/t/encrypting-data-at-rest/23693/11 "2019-03-03T21:13:42Z")

</div>

Our current recommendation is:

1. If you are on AWS, rely on AWS features like DB encryption at rest and [S3 server side encryption](https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingEncryption.html).

2. If you are self hosting on digital ocean, use OS level encryption, for example LUKS.

---

_[View the full topic](https://meta.discourse.org/t/encrypting-data-at-rest/23693)._