Data encryption

Vault provides Encryption as a Service (EaaS) to enable security teams to fortify data during transit and at rest. So even if an intrusion occurs, your data is encrypted and the attacker would never get a hold of the raw data.

Start

5 tutorials

36min
Encrypt data in transit with Vault
Add application-level data encryption and decryption with the Vault transit secrets engine and manage encryption key rotation with Vault.
- Vault
- Interactive
- Video
16min
Re-wrapping data after encryption key rotation
Demonstrate one possible way to re-wrap data after rotating an encryption key in the transit engine in Vault.
- Vault
10min
Encrypt Spring application data with Vault
Use Spring Vault library to develop an application that encrypts and decrypts data with the transit secrets engine.
- Vault
50min
Transform sensitive data with Vault
Transform secrets engine allows generation of cryptographically secure tokens mapped to sensitive data such as credit card numbers.
- Vault
40min
Data tokenization with transform secrets engine
Learn how Vault's transform secrets engine performs data tokenization to provide maximum resistance to data being compromised.
- Vault