Data encryption

Vault provides Encryption as a Service (EaaS) to enable security teams to fortify data during transit and at rest. So even if an intrusion occurs, your data is encrypted and the attacker would never get a hold of the raw data.

Start

5 tutorials

36min
Encryption as a service: transit secrets engine
Vault's transit secrets engine handles cryptographic functions on data in-transit. It can also be understood as encryption as a service.
- Vault
- Interactive
- Video
16min
Transit secrets re-wrapping
Demonstrate one possible way to re-wrap data after rotating an encryption key in the transit engine in Vault.
- Vault
10min
Encrypt Spring application data with Vault
Use Vault's transit secrets engine to encrypt and decrypt data in Spring applications.
- Vault
50min
Transform sensitive data with Vault
Transform secrets engine allows generation of cryptographically secure tokens mapped to sensitive data such as credit card numbers.
- Vault
40min
Data tokenization with transform secrets engine
Learn how Vault's transform secrets engine performs data tokenization to provide maximum resistance to data being compromised.
- Vault