diff --git a/CHANGES b/CHANGES
index 00b36cbac..12251b92e 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2778,4 +2778,5 @@
 * app: memory limit is redefined to be just RAM and unlimited swap
 * dashboard: rework filter UI
 * cpu: rework cpu shares into cpu quota
+* cifs: enable seal encryption by default
 
diff --git a/dashboard/src/views/app.html b/dashboard/src/views/app.html
index f608cec6a..27aba03f1 100644
--- a/dashboard/src/views/app.html
+++ b/dashboard/src/views/app.html
@@ -345,6 +345,13 @@
             <input type="number" class="form-control" ng-model="importBackup.mountOptions.port" id="configureBackupPort" name="port" ng-disabled="importBackup.busy" ng-required="importBackup.provider === 'sshfs'">
           </div>
 
+          <!-- CIFS -->
+          <div class="checkbox" ng-show="importBackup.provider === 'cifs'">
+            <label>
+              <input type="checkbox" ng-model="importBackup.mountOptions.seal">{{ 'backups.configureBackupStorage.cifsSealSupport' | tr }}</input>
+            </label>
+          </div>
+
            <!-- CIFS/NFS/SSHFS -->
           <div class="form-group" ng-show="importBackup.provider === 'cifs' || importBackup.provider === 'nfs' || importBackup.provider === 'sshfs'">
             <label class="control-label" for="configureBackupRemoteDir">{{ 'backups.configureBackupStorage.remoteDirectory' | tr }} ({{ importBackup.provider }})</label>
diff --git a/dashboard/src/views/app.js b/dashboard/src/views/app.js
index d99953c8c..40c88332b 100644
--- a/dashboard/src/views/app.js
+++ b/dashboard/src/views/app.js
@@ -1417,7 +1417,17 @@ angular.module('Application').controller('AppController', ['$scope', '$location'
         remotePath: '',
         password: '',
         encryptedFilenames: true,
-        mountOptions: {}, // host, port, username, password, remoteDir, diskPath, user, privateKey
+        mountOptions: {
+            host: '',
+            remoteDir: '',
+            username: '',
+            password: '',
+            diskPath: '',
+            user: '',
+            seal: true,
+            port: 22,
+            privateKey: ''
+        },
         encrypted: false, // helps with ng-required when backupConfig is read from file
 
         clearForm: function () {
@@ -1435,7 +1445,7 @@ angular.module('Application').controller('AppController', ['$scope', '$location'
             $scope.importBackup.password = '';
             $scope.importBackup.encryptedFilenames = true;
             $scope.importBackup.remotePath = '';
-            $scope.importBackup.mountOptions = {};
+            $scope.importBackup.mountOptions = { host: '', remoteDir: '', username: '', password: '', diskPath: '', seal: true, user: '', port: 22, privateKey: '' };
         },
 
         submit: function () {