Is Bubble data stored in an encrypted format?

Need help
1

Is data on Bubble stored in a fully encrypted format, i,e. if someone hacked in, would they be able to read the content or would it all be just encrypted text?

2

The bubble database is encrypted at rest on AWD RDS.

If someone hacked into YOUR Bubble account and looked at YOUR data ā€¦ it would not be.

3

Hi Nigel, just been reading an excellent thread that you were heavily contributing to and it is clear from that you know a LOT.

So technically, can I say to my users that the data is encrypted or would that be inaccurate?

My reason for asking is that Iā€™ve been using the Encode/Decode plugin, but the problem with that is that it is an easy job for me just to login as any user and see the data anyway, so it makes me wonder what the point is. Am I just creating a big workflow processing overhead for no actual benefit?

1 Like
4

With 99% of certainty, yes. See my comments in that same thread. Including a link in one of my first responses.

3 Likes
5

+1

Unless you NEED to store something like a token (in which case I move the keys off to another external service) then it is almost certainly overkill.

2 Likes
6

Quick question then @NigelG and @vini_brito

Assuming I am using the default Bubble set-up how can I accurately and honestly describe the encryption/security to my users to ensure them that their data is safe and secure?

And a big thanks to both of you for your advice.

7

You can scan the forum and official documentation for informatin about security, but in short itā€™s what Nigel already said in his last response. (:

2 Likes
8
  • HTTPS / SSL encryption is used to secure transfer between the userā€™s browser and the database
  • The database is encrypted at rest, on Amazon Web Services RDS
  • User passwords are salted and encrypted and held separately
  • Privacy Roles are available to ensure data is not visible to other users

Something like that ?

5 Likes
9

Thatā€™s perfect.

I looked up AWS RDS and got the following:

ā€œRDS encryption uses AES-256 encryption algorithm to encrypt your data on the server that hosts your RDS instanceā€

and if anyone visiting my app wants to know more I figure I can link through to this:

So all in all, the data is pretty much as secure as it can be, isnā€™t it?

Thanks for your help Nigel. Really appreciate that clarity, as I was a bit worried that it wasnā€™t secure, but it turns out it is.

2 Likes
10

This topic was automatically closed after 70 days. New replies are no longer allowed.