# Is Bubble database data encrypted? **URL:** \ **Category:** Questions\ **Created:** [July 19, 2016, 1:55pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490 "2016-07-19T13:55:00Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![rmadison](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/rmadison/32/16972_2.png) [@rmadison](https://forum.bubble.io/u/rmadison)\ **Post date:** [July 19, 2016, 1:55pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/1 "2016-07-19T13:55:00Z")
We are building an application on Bubble that may require us to store our user’s passwords from another service. This leads us to ask if the Bubble data is encrypted. We suspect it is not as a rule, and we’re ok with that. We’re considering encrypting the required information (remote service username and password) prior to saving it to Bubble and right after retrieving it from Bubble. I suspect we can achieve the encryption/decryption through a remote API. Before we do this work I just wanted to check if the database data being stored by Bubble is encrypted. Also, if it’s not encrypted would it be possible to have Bubble add this feature on a Field by Field basis (i.e. adding a Field Type called “Encrypted Password”) that could protect this data in the event that the Bubble database was ever exposed. Thanks. ---
**Author:** ![emmanuel](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/emmanuel/32/27657_2.png) [@emmanuel](https://forum.bubble.io/u/emmanuel)\ **Post date:** [July 19, 2016, 5:51pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/2 "2016-07-19T17:51:58Z")
Bubble is hosted on AWS which maintains a state-of-the-art security infrastructure. We encrypt all traffic to bubble.is over https, and encourage and support our clients to use encryption on their own domains. All user passwords are stored salted + encrypted in our database; other user data is not encrypted at rest, but we plan to change this in the next two months as part of a migration from a NoSQL database (elasticsearch) to a SQL database (postgres). ---
**Author:** ![AliFarahat](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/alifarahat/32/189604_2.png) [@AliFarahat](https://forum.bubble.io/u/AliFarahat)\ **Post date:** [July 19, 2016, 6:38pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/3 "2016-07-19T18:38:31Z")
Great you guys are planning to change the databas. What are some features and improvements can we expect? Will we have the ability to build query? ---
**Author:** ![emmanuel](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/emmanuel/32/27657_2.png) [@emmanuel](https://forum.bubble.io/u/emmanuel)\ **Post date:** [July 19, 2016, 6:42pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/4 "2016-07-19T18:42:34Z")
This is mostly a behind the scene thing for now, though i’ll probably open some possibilities down the line. ---
**Author:** ![birbilis](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/birbilis/32/734_2.png) [@birbilis](https://forum.bubble.io/u/birbilis)\ **Post date:** [July 19, 2016, 8:59pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/5 "2016-07-19T20:59:15Z")
btw, should avoid storing passwords and store hashes instead ---
**Author:** ![pnodseth](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/pnodseth/32/2611_2.png) [@pnodseth](https://forum.bubble.io/u/pnodseth)\ **Post date:** [July 19, 2016, 10:30pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/6 "2016-07-19T22:30:10Z")
Will change of database increase search speed and loading times? ---
**Author:** ![Bradluffy](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/bradluffy/32/955_2.png) [@Bradluffy](https://forum.bubble.io/u/Bradluffy)\ **Post date:** [July 19, 2016, 11:20pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/7 "2016-07-19T23:20:31Z")
Very interested to hear why you are making this transition and what can the average app designer with bubble expect to see as a result? ---
**Author:** ![csfalcao](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/csfalcao/32/557_2.png) [@csfalcao](https://forum.bubble.io/u/csfalcao)\ **Post date:** [July 20, 2016, 12:20am UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/8 "2016-07-20T00:20:40Z")
NoSQL databases are pretty popular nowadays, I’m curious to hear what motivated the move. ---
**Author:** ![alex](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/alex/32/3794_2.png) [@alex](https://forum.bubble.io/u/alex)\ **Post date:** [August 15, 2016, 9:19pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/9 "2016-08-15T21:19:25Z")
@emmanuel, does this mean that all data will be encrypted at rest when you make the switch to the new database? Or will this be a feature only available to certain paid Bubble tiers? We’re looking at working with folks in industries like healthcare (non-HIPAA, but still healthcare) and financial services - Bubble could be really helpful for them and part of their hesitation to use Bubble right now is around data security. Thanks! ---
**Author:** ![emmanuel](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/emmanuel/32/27657_2.png) [@emmanuel](https://forum.bubble.io/u/emmanuel)\ **Post date:** [August 15, 2016, 9:25pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/10 "2016-08-15T21:25:46Z")
We can’t commit right now for this, we’ll see. What’s likely to be is on the Dedicated Plan first, and then maybe make it an option on lower plans, we’ll see. ---
**Author:** ![alex](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/alex/32/3794_2.png) [@alex](https://forum.bubble.io/u/alex)\ **Post date:** [August 15, 2016, 9:37pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/11 "2016-08-15T21:37:08Z")
Thanks for the quick reply, as always. ---
**Author:** ![jwhite](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/jwhite/32/92278_2.png) [@jwhite](https://forum.bubble.io/u/jwhite)\ **Post date:** [March 2, 2017, 1:27am UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/12 "2017-03-02T01:27:47Z")
Emmanuel, has the database migration been performed and are all data encrypted at rest? ---
**Author:** ![emmanuel](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/emmanuel/32/27657_2.png) [@emmanuel](https://forum.bubble.io/u/emmanuel)\ **Post date:** [March 2, 2017, 1:33am UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/13 "2017-03-02T01:33:56Z")
Yes, all user passwords are stored salted + encrypted in our database; other user data is encrypted at rest (we’re on AWS RDS). ---
**Author:** ![jwhite](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/jwhite/32/92278_2.png) [@jwhite](https://forum.bubble.io/u/jwhite)\ **Post date:** [March 2, 2017, 1:36am UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/14 "2017-03-02T01:36:02Z")
Thank you. I’m curious where the Bubble encryption keys are stored and are there separate keys for each developer account? The reason that I ask is that we are planning to develop a healthcare related app and it must comply to HIPAA security standards. ---
**Author:** ![emmanuel](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/emmanuel/32/27657_2.png) [@emmanuel](https://forum.bubble.io/u/emmanuel)\ **Post date:** [March 2, 2017, 1:38am UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/16 "2017-03-02T01:38:09Z")
Unfortunately HIPAA isn’t something that Bubble supports at this stage. ---
**Author:** ![daniel3](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/daniel3/32/14049_2.png) [@daniel3](https://forum.bubble.io/u/daniel3)\ **Post date:** [March 7, 2017, 8:59am UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/17 "2017-03-07T08:59:35Z")
I know achieving certified HIPAA compliance at the platform level would be a massive dev initiative for Bubble, @emmanuel. However, I’d also guess with enough interest, this could be productized at quite a premium, given that 1. It’s table stakes for anyone developing a health care app (demand) 2. No players in the Visual Programming space offer the option (differentiation) 3. Clients looking for custom-built apps in the health market typically expect/tolerate a much higher price point. (viability) I’m thinking you may find Bubblers willing to pay handsomely for a platinum “Dedicated Hosting + HIPPA” tier at $1K+ per month if they truly have an oppty to develop for this space…might be worth a little market research via user survey. Loss leader for a while, but game changer in terms of moving the needle on ARR & LTV when exit time looms 🙂 Bottom line, is it worth trying to mobilize a Sponsored Feature campaign, or does this fall in the “you can’t pay me enough to go near that” category, at least for now? 😱 ---
**Author:** ![emmanuel](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/emmanuel/32/27657_2.png) [@emmanuel](https://forum.bubble.io/u/emmanuel)\ **Post date:** [March 7, 2017, 9:11am UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/18 "2017-03-07T09:11:18Z")
We would love to do this, and we hope to do this at some point, but it’s not something we can do currently, even on a sponsored basis, unfortunately. ---
**Author:** ![daniel3](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/daniel3/32/14049_2.png) [@daniel3](https://forum.bubble.io/u/daniel3)\ **Post date:** [March 7, 2017, 9:14am UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/19 "2017-03-07T09:14:10Z")
Understood. Thanks for the quick reply, happy to discuss down the road if/when you’re contemplating taking on this initiative. ---
**Author:** ![matchen](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/matchen/32/8864_2.png) [@matchen](https://forum.bubble.io/u/matchen)\ **Post date:** [March 7, 2017, 6:32pm UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/20 "2017-03-07T18:32:53Z")
Are any fields indexed? Do users have the ability to index fields that will be searched on? Did the new database give you more capability in this regard? ---
**Author:** ![emmanuel](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/emmanuel/32/27657_2.png) [@emmanuel](https://forum.bubble.io/u/emmanuel)\ **Post date:** [March 8, 2017, 12:56am UTC](https://forum.bubble.io/t/is-bubble-database-data-encrypted/4490/21 "2017-03-08T00:56:43Z")
Hello, Yes, we automatically create indexes behind the scenes. That’s a built-in feature.