A data storage device includes a memory and a controller that is coupled to the memory. The controller includes an authentication engine, an interface, and an encryption engine. The authentication engine is configured to authenticate an accessing device based on a message received from the accessing device. The interface is configured to receive data from the accessing device. The message is associated with a first security protocol that does not specify that the data is to be encrypted. The encryption engine is configured to encrypt the data in accordance with a second security protocol, and the controller is configured to receive, after encrypting the data, a request from the accessing device to operate according to the second security protocol.