Skip to main content
Azure Blob Storage containers. The only provider with a choice of auth method — SAS URL or account key.

​
At a Glance

​
Credentials

Create a secret with the Azure Blob provider type. Azure is the one provider where you choose between two auth methods: Prefer SAS URLs over account keys. SAS (Shared Access Signature) URLs are scoped to specific containers and operations, and they expire automatically. Account keys grant full access to the entire storage account. Generate the SAS URL from the Azure portal with the minimum required permissions (read/write/list) and a reasonable expiration window.

​
Location Setup

Example:

​
Importing from rclone.conf

Azure remotes appear in rclone.conf as type = azureblob. If the remote has a sas_url, it imports with the SAS URL auth method; otherwise the account and key fields import as an account-key secret. The remote’s container value carries over as the bucket name. See the rclone import guide.