# Encrypting data at rest

**URL:** <https://meta.discourse.org/t/encrypting-data-at-rest/23693>\
**Category:** Sysadmins\
**Tags:** explanation\
**Created:** [January 5, 2015, 10:13pm UTC](https://meta.discourse.org/t/encrypting-data-at-rest/23693 "2015-01-05T22:13:45Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![dhyasama](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/dhyasama/32/106648_2.png) [@dhyasama](https://meta.discourse.org/u/dhyasama)\
**Post date:** [January 5, 2015, 10:13pm UTC](https://meta.discourse.org/t/encrypting-data-at-rest/23693/1 "2015-01-05T22:13:45Z")

</div>

For a variety of reasons I’d like to encrypt all data at rest in our private financial forum. What are the options and issues?

At the database level, common approaches are column-specific, whole database, and whole disk. Are any of these possible with Discourse? If so, what are the pros and cons?

For attachments, I’m uploading to S3 and plan to turn on server-side S3 encryption which should be transparent to Discourse. Has anyone tried this yet?

---

_[View the full topic](https://meta.discourse.org/t/encrypting-data-at-rest/23693)._