---
name: "xbcrypt"
section: "1"
platform: "linux"
package: "xtrabackup"
version: "9.7.1_rc1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/xbcrypt"
---

# xbcrypt(1)

Percona xbcrypt Documentation To support encryption and decryption of the backups, a new tool xbcrypt was introduced to Percona XtraBackup. Percona XtraBackup 8.0.28-20 implements the XBCRYPT\_ENCRYPTION\_KEY environment variable. The variable is only used in place of the --encrypt\_key=name option. You can use the environment variable or command line option. If you use both, the command line option takes precedence over the value specified in the environment variable. This utility has been modeled after xbstream\_binary to perform encryption and decryption outside of Percona XtraBackup. xbcrypt has following command line options:

## NAME

xbcrypt - Percona xbcrypt Documentation

To support encryption and decryption of the backups, a new tool **xbcrypt** was introduced to *Percona XtraBackup*.

**Percona XtraBackup** 8.0.28-20 implements the XBCRYPT\_ENCRYPTION\_KEY environment variable. The variable is only used in place of the **--encrypt\_key=name** option. You can use the environment variable or command line option. If you use both, the command line option takes precedence over the value specified in the environment variable.

This utility has been modeled after xbstream\_binary to perform encryption and decryption outside of *Percona XtraBackup*. **xbcrypt** has following command line options:

- **-d, --decrypt**

  Decrypt data input to output.

- **-i, --input=name**

  Optional input file. If not specified, input will be read from standard input.

- **-o, --output=name**

  Optional output file. If not specified, output will be written to standard output.

- **-a, --encrypt-algo=name**

  Encryption algorithm.

- **-k, --encrypt-key=name**

  Encryption key.

- **-f, --encrypt-key-file=name**

  File which contains encryption key.

- **-s, --encrypt-chunk-size=#**

  Size of working buffer for encryption in bytes. The default value is 64K.

- **--encrypt-threads=#**

  This option specifies the number of worker threads that will be used for parallel encryption/decryption.

- **-v, --verbose**

  Display verbose status output.

## AUTHOR

Percona LLC and/or its affiliates

## COPYRIGHT

2009-2022, Percona LLC and/or its affiliates