Encode data using an encryption key, making it unreadable without the key. Data should be encrypted both at rest (stored data) and in transit (data being transferred).