mirror of https://github.com/grafana/grafana.git
16 lines
801 B
Markdown
16 lines
801 B
Markdown
+++
|
||
title = "Database encryption"
|
||
description = "Grafana database encryption"
|
||
keywords = ["grafana", "database", "encryption", "documentation"]
|
||
aliases = [""]
|
||
weight = 450
|
||
+++
|
||
|
||
# Grafana database encryption
|
||
|
||
Grafana’s database contains secrets, which are used to query data sources, send alert notifications and perform other functions within Grafana.
|
||
|
||
Grafana encrypts these secrets before they are written to the database, by using a symmetric-key encryption algorithm called Advanced Encryption Standard (AES), and using a [secret key]({{< relref "../administration/configuration/#secret_key" >}}) that you can change when you configure a new Grafana instance.
|
||
|
||
You can also use envelope encryption, which complements a KMS integration by adding a layer of indirection to the encryption process.
|