Appwrite Database Encryption

123 views Asked by At

how does Appwrite handle database security? I am interested in data encryption. Would the database be safe if someone gets access to the storage or would it be in plain text?

Thank you for your help in advance.

1

There are 1 answers

4
Steven Nguyen On

Sensitive data (e.g project/function variables, API keys, OAuth provider settings, etc) is encrypted using the _APP_OPENSSL_KEY_V1 environment variable before being inserted into the database, so if someone gets access to the database, they will only see encrypted data.

We also quietly introduced the ability to encrypt string attributes, but I'd like to try it more before announcing it more.