> For the complete documentation index, see [llms.txt](https://cloudback.it/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cloudback.it/docs/encryption-management.md).

# Encryption Management

Learn how Cloudback encrypts backup archives and how to manage your own encryption keys for full control over backup security.

Cloudback encrypts every backup archive with a unique password. You can use the built-in encryption (Cloudback manages everything) or bring your own encryption keys for full control.

## Pages

* [Encryption Overview](/docs/encryption-management/encryption-overview.md) - Built-in vs customer-managed encryption modes, choosing the right mode, and FAQs
* [RSA Lockbox: Setup and Usage](/docs/encryption-management/rsa-lockbox.md) - Create an RSA Lockbox encryption provider, assign it to accounts, restore and download encrypted backups, and rotate keys
* [Customer-Held RSA Lockbox: Setup and Usage](/docs/encryption-management/customer-held-rsa-lockbox.md) - RSA Lockbox variant where the encrypted password is stored as a `.lockbox` sidecar in your own backup storage