diff --git a/prebuilt/common/etc/init/lineage-ssh.rc b/prebuilt/common/etc/init/lineage-ssh.rc
index edf38638..f3613c34 100644
--- a/prebuilt/common/etc/init/lineage-ssh.rc
+++ b/prebuilt/common/etc/init/lineage-ssh.rc
@@ -1,3 +1,3 @@
 on post-fs-data
-    mkdir /data/ssh 0750 root shell
+    mkdir /data/ssh 0750 root shell encryption=Require
     mkdir /data/ssh/empty 0600 root shell
diff --git a/prebuilt/common/etc/init/lineage-updates.rc b/prebuilt/common/etc/init/lineage-updates.rc
index 3a9b4813..f1bed8d3 100644
--- a/prebuilt/common/etc/init/lineage-updates.rc
+++ b/prebuilt/common/etc/init/lineage-updates.rc
@@ -1,4 +1,4 @@
 on post-fs-data
     # Create an additional OTA package directory that unlike /data/ota_package
     # will not be touched by GmsCore.
-    mkdir /data/lineageos_updates 0770 system cache
+    mkdir /data/lineageos_updates 0770 system cache encryption=Require