Which encryption is in use?

[JoeyVisbeen]

I was looking around the source code and couldn't find where encryption is applied.
So my question is what kind of encryption do you use for your data at rest?

[pglombardo]

Hi @JoeyVisbeen - Password Pusher uses lockbox (using the AES-GCM algorithm) to encrypt sensitive fields before they are stored. It acts as an ActiveRecord middle layer to passively encrypt selected fields (e.g. payload, note).

When hosting your own private instance, we suggest setting your own encryption key.

A bit more documentation on encryption is available here:

• https://github.com/pglombardo/PasswordPusher/blob/master/Configuration.md#application-encryption
• https://pwpush.com/en/pages/generate_key

I hope this answers your question. If there is anything else, let me know.

[pglombardo]

We now have a page that explains the security of Password Pusher: https://docs.pwpush.com/docs/security/