Check the encryption status of a blob
- 2 minutes to read
Every block blob, append blob, or page blob in Azure Storage is encrypted with Azure Storage encryption. This article shows how to determine whether a specific blob has been encrypted.
For more information about Azure Storage encryption, see Azure Storage encryption for data at rest.
Check a blob's encryption status
Use the Azure portal, PowerShell, or Azure CLI to determine whether a blob is encrypted without code.
To use the Azure portal to check whether a blob has been encrypted, follow these steps:
In the Azure portal, navigate to your storage account.
Select Containers to navigate to a list of containers in the account.
Locate the blob and display its Overview tab.
View the Server Encrypted property. If True, as shown in the following image, then the blob is encrypted. Notice that the blob's properties also include the date and time that the blob was created.
To use PowerShell to check whether a blob has been encrypted, check the blob's IsServerEncrypted property. Remember to replace placeholder values in angle brackets with your own values:
$account = Get-AzStorageAccount -ResourceGroupName <resource-group> `
$blob = Get-AzStorageBlob -Context $account.Context `
-Container <container> `
To determine when the blob was created, check the value of the Created property:
To use Azure CLI to check whether a blob has been encrypted, check the blob's IsServerEncrypted property. Remember to replace placeholder values in angle brackets with your own values:
az storage blob show \
--account-name <storage-account> \
--container-name <container> \
--name <blob> \
To determine when the blob was created, check the value of the created property.
Azure Storage encryption for data at rest