---
title: "Covert Copy: Setting Up and Creating a Covert Copy"
slug: "covert-copy-buckets"
updated: 2026-09-22T16:24:02Z
published: 2026-09-22T16:24:02Z
canonical: "docs.wasabi.com/covert-copy-buckets"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wasabi.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Covert Copy: Setting Up and Creating a Covert Copy

## Requirements

[MFA](https://docs.wasabi.com/docs/creating-a-virtual-multi-factor-authentication-mfa-device), [MUA](https://docs.wasabi.com/docs/adding-security-contacts), and [bucket versioning](https://docs.wasabi.com/docs/versioning) must be set up before you can use the Covert Copy feature.

To set up MUA for Covert Copy, follow the standard [MUA configuration steps](https://docs.wasabi.com/docs/adding-security-contacts) and make sure you have assigned the **Delete Covert Copy Bucket** and **Access Covert Copy Bucket** activities to at least one security contact.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-PYNCQ8VQ.png)

## Getting Started by Selecting a Source Bucket

There are two ways to start to create a covert copy.

- From the Buckets list
- From the Covert Copy Buckets list (if you already have covert copies).

### Starting From the Buckets List

1. If you are on the Buckets list, click ![actions-ellipsis](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/actions-ellipsis.png)to access options for the bucket you want to copy.
2. Click **Covert Copy**. In this example, we will create a covert copy of bucket-with-versioning.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-LKC3BPJL.png)

The Create Covert Copy Bucket panel is displayed when MFA, MUA, and bucket versioning are enabled. Note that the source bucket is displayed at the top of this panel.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-L654IKZI.png)

MFA, MUA, and bucket versioning must be enabled to create a covert copy. In the example below, only bucket versioning is enabled. You can click **Fix** to the right of an option to enable that feature.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-M53W27ZP.png)
3. Continue by [selecting a method and creating the covert copy](/v1/docs/covert-copy-buckets#selecting-a-method-and-creating-the-covert-copy).

### Starting From the Covert Copy Buckets List

1. If you are on the Covert Copy Buckets list, click **Create Covert Copy Bucket** to access options for the bucket you want to copy.
2. The Create Covert Copy Bucket panel is displayed. Click in the **Source Bucket** field and select a source bucket for the covert copy.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-L654IKZI.png)

If versioning is not enabled for the bucket, a message will indicate it is required. You can click **Enable versioning**.
3. Continue by selecting a method and creating the covert copy.

## Selecting a Method and Creating the Covert Copy

There are two ways to create a covert copy:

- Recommended—Suggested settings are used, and you will have an opportunity to review the settings. This method is ideal for a one-time copy of your bucket with periodic updates. The storage region is selected for you.
- Custom—You define all covert copy settings.

Select either method and then follow the appropriate instructions below.

### Recommended Method

1. After you select the Recommended method, you may want to review settings before creating the covert copy. Click **Review First**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-A6D08J78.png).
2. Enter the current MFA code, which is required to protect the covert copy bucket.
3. Before the code expires, click **Create Covert Copy**.

Your covert copy is displayed in the Covert Copy Bucket List. For example:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-7MP67J2I.png)

Notice that the Covert Copy Status is ![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-IDZGHH9D.png). This changes to ![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-EFW0JIS8.png) after all applicable objects are replicated in the covert copy bucket.

### Custom Method

1. After you select the Custom method, scroll down to see additional fields.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-Z5K73YSC.png)

Select the region in which the covert copy bucket will be created. This must be within the same continent/geographic region as the source bucket.
2. Indicate the versions of your objects that you want to copy:
  - **All versions** of the objects in your source bucket.
  - Only the **Most current version** of the objects in your source bucket.
3. Indicate which objects you want to copy:
  - **All objects** that exist in the source bucket.
  - A **Subset of objects** that you want to protect with a covert copy using filters. If you select this option, you can:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-H6I9BUDL.png)
    - Enter a prefix to use to filter the objects. For example, enter **images/** to select all objects in the images folder.
    - Specify that you want to use covert copy for objects of a minimum and/or maximum object size.
    - Specify that you want to use covert copy for objects created on or after a start date and/or objects created until a date (end date).
4. You may want to review settings before creating the covert copy. Click **Review First**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-A6D08J78.png).
5. Enter the current MFA code, which is required to protect the covert copy bucket.
6. Before the code expires, click **Create Covert Copy**.

Your covert copy is displayed in the Covert Copy Bucket List. For example:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-7MP67J2I.png)

Notice that the Covert Copy Status is ![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-IDZGHH9D.png). This changes to ![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-EFW0JIS8.png) after all applicable objects are replicated in the covert copy bucket.

## Displaying the Covert Copy Buckets List

To display the covert copy buckets at any time, click **Covert Copy** in the Wasabi menu on the left of the screen.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-L00KAGBG.png)

## Retrying When an Error Occurs

If you see an Error in the Covert Copy Status, you can check the covert copy settings and retry.

1. Click ![actions-ellipsis](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/actions-ellipsis.png)to access options for the bucket you want to set.
2. Click **Settings**.
3. Click **Retry** in the error message.

If the process continues to fail, contact [Wasabi Support](mailto:support@wasabi.com).