Encryption

Veridian uses AES-256-GCM to encrypt sensitive data at rest. All API keys are encrypted using a key derived from the user's password at login. This key is stored in the browser's local storage, and is never sent to the server.

When you store your API key, your browser sends an encrypted version of the key to the server and when you make a request to the server, your browser decrypts your API key and sends it to the server.