What does the encryption field on a bucket tell me?

Q: What does the encryption field on a bucket tell me?

The encryption object describes how the bucket's stored files are encrypted. Every bucket gets its own 256-bit data key when it's created (noted in its bucket.created event), and each stored chunk is encrypted with AES-256-GCM under that key. The data key itself is wrapped by a Clatter Labs master key. See Encryption .

FAQUpdated November 2, 2026

The encryption object describes how the bucket's stored files are encrypted. Every bucket gets its own 256-bit data key when it's created (noted in its bucket.created event), and each stored chunk is encrypted with AES-256-GCM under that key. The data key itself is wrapped by a Clatter Labs master key.

See Encryption.