Default password encryption algorithm?

[edgar.avdejev]

What is the default password encryption algorithm in bubble.io applications?

[chris.williamson1996]

In short they hash & salt their passwords (likely salted SHA256). Additionally all data in bubble is AES encrypted at rest. Josh answers some more in depth security questions here you can read up on.

Josh: Request for a Security Q&A Guide

Hi all, sorry for being slow to respond on this. Here’s an FAQ that I hope touches on most of the main questions. I also want to note, for the benefit of future readers of this FAQ, that we’re currently hiring engineers and plan to devote significant engineering capacity over the next year towards strengthening our security and compliance stances, so if you’re reading this, check the date on the post: we may post more updated information on our website once we’ve done more work on this. Thank…

[edgar.avdejev]

Thanks a lot!