Encryption at rest
This feature is only available on MongoDB Enterprise Advanced or MongoDB Atlas (M10 and above). Encryption at rest allows you to encrypt data on storage devices, such as disks, arrays, etc. In contrast to encryption in-transit, which protects data while it is being transmitted between the client and the server, encryption at rest protects data directly on physical storage. This means that if your hardware is stolen or disks are compromised, the data remains protected.
MongoDB uses the AES-256 encryption algorithm to encrypt data. AES-256 is a strong encryption algorithm which is difficult to crack and is used in a wide variety of compliance standards. This algorithm uses a symmetric key, that is, the same key to encrypt and decrypt data.
Encryption at rest in MongoDB
MongoDB offers various options for implementing encryption at rest:
- Transparent data encryption (TDE): MongoDB Enterprise provides transparent encryption of data at rest, meaning encryption...
