10 lines
442 B
Markdown
10 lines
442 B
Markdown
# Encryption
|
|
|
|
Veridian uses AES-256-GCM to encrypt sensitive data at rest. All API keys are
|
|
encrypted using a key derived from the user's password at login. This key is
|
|
stored in the browser's local storage, and is never sent to the server.
|
|
|
|
When you store your API key, your browser sends an encrypted version of the key
|
|
to the server and when you make a request to the server, your browser decrypts
|
|
your API key and sends it to the server.
|