A flash memory process and device for encrypting and storing data in a non-volatile flash memory associated with a host system. The device includes a flash memory, an encryption engine, a key store, a SRAM to interface with the host system, and associated control circuitry. When powered on, the device first determines if a valid encryption key is held in the key store. If a valid key is held in the store, a program flag is set when encrypted data in the flash memory is ready to be decrypted by the engine and stored in the SRAM for use by the host system, or when data originating from the host system and stored in the SRAM is ready to be encrypted by the engine and programmed into the flash memory. The device can be embedded in any host system wherein data must be encrypted while at rest in a memory.