FlowFuse / FlowFuse/flowfuse

Improve Data at Rest Security - Encrypt tables passwords in database

Open
#5,820 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
400
Forks
89
Avg merge
1d 21h
Merged PRs (30d)
146

Description

We should encrypt the tables passwords in the database as a best practice.

> This PR will store the DB password in unencrypted format. While I realise we are presenting this to the user unencrypted, it does go against "data at rest security". This may not be super critical due to DB accessibility on the platform in our case at FFC, but for self hosted this may be a no-go due to regulations around this area for their industry (hippa?) and their architecture (e.g. location of database)?

_Originally posted by @Steve-Mcl in https://github.com/FlowFuse/flowfuse/issues/5764#issuecomment-3112927321_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.