how does Appwrite handle database security? I am interested in data encryption. Would the database be safe if someone gets access to the storage or would it be in plain text?
Thank you for your help in advance.
how does Appwrite handle database security? I am interested in data encryption. Would the database be safe if someone gets access to the storage or would it be in plain text?
Thank you for your help in advance.
Sensitive data (e.g project/function variables, API keys, OAuth provider settings, etc) is encrypted using the
_APP_OPENSSL_KEY_V1
environment variable before being inserted into the database, so if someone gets access to the database, they will only see encrypted data.We also quietly introduced the ability to encrypt string attributes, but I'd like to try it more before announcing it more.