Encryption at rest vs. encryption in transit: What businesses need to understand

Encryption is a term every business recognizes but that few actually interrogate in conversations with potential vendors. If a provider says that it encrypts data or that it offers “bank-grade security”, these phrases sound reassuring. But they don’t actually tell you anything about the encryption itself: encrypted where, encrypted when, and encrypted how? We’ll explain the difference between encryption at rest and encryption in transit, what your business needs to know about them, and what to ask vendors when you’re approaching them. What do encryption at rest and encryption in transit mean? What do encryption at rest and encryption in transit mean? They sit in storage. They travel across networks. They’re decrypted so someone can actually use them. Each of those conditions is vulnerable to a different kind of attack, and a service can be well-protected in one condition while vulnerable in another. The two terms every business leader should understand are encryption at rest and encryption in transit. They are often mentioned together, but they do different jobs. One protects data while it is stored. The other protects data while it is moving. Both are necessary, but when you’re using encryption you have to consider who holds the keys…