DATA ENCRYPTION

Hi, I wonder if Supabase provide data encryption itself? Like if I want to encrypt a certain column does Supabase have ability to do that?

I saw something related to it about Transparent Column Encryption and Supabase Vault. But I'm not sure and can't really find them on Supabase frontend.

garyaustin•10/22/25, 1:26 PM

Postgres has limited encryption for a columns https://www.postgresql.org/docs/current/pgcrypto.html . Vault is not recommend for user data.

Note though it depends on what you are trying to protect from. Any encryption you do serverside can be read by anyone on your staff at the DB level. Data is already encrypted in flight from the client and on disk.

PostgreSQL Documentation

F.26. pgcrypto — cryptographic functions

F.26. pgcrypto — cryptographic functions # F.26.1. General Hashing Functions F.26.2. Password Hashing Functions F.26.3. PGP Encryption Functions F.26.4. Raw Encryption …

Ggaryaustin Postgres has limited encryption for a columns https://www.postgresql.org/docs/cu...

penguOP•10/22/25, 3:49 PM

If I want to store Custodial Wallet keys for users. Is Vault a good place to go?

garyaustin•10/22/25, 4:03 PM

It is not recommended to store user info using Vault.
Note you or your staff can still read these keys in Vault.

garyaustin•10/22/25, 4:13 PM

Ask google or an AI this...
Can I store users' Custodial Wallet keys in my database for an app I'm building?Can I store users' Custodial Wallet keys in my database for an app I'm building?
Short answer you don't want to.

vick•10/23/25, 2:52 AM

Say I want to store some security token per user. Why is vault not a good place for it?

Vvick Say I want to store some security token per user. Why is vault not a good place ...

garyaustin•10/23/25, 3:44 PM

Not counting that your staff could see them and the banking implications above.
Nothing that I know of. Just Supabase everytime only brings up using it for API settings and secrets needed in the DB. Somewhere in the past a dev commented that it was not intended for user info.
No idea how scalable it is with whatever they do after encryption stops being what they use.

DATA ENCRYPTION

Similar Threads

Similar Threads

Similar Threads