Secure

Secure

Secure your deployment of YugabyteDB.

This page documents the preview (v2.21) version. Preview includes features under active development and is for development and testing only. For production, use the stable (v2024.1) version.

Security checklist

Consider these security measures when deploying your YugabyteDB cluster.

Enable authentication

Enable authentication for all clients connecting to YugabyteDB.

Authentication methods

Choose the appropriate authentication mechanism.

Role-based access control

Manage users and roles, grant privileges, implement row-level security (RLS), and column-level security.

Encryption in transit

Enable encryption in transit (using TLS) to secure and protect network communication.

Encryption at rest

Enable encryption at rest in YugabyteDB (using TLS) to secure and protect data on disk.

Configure YugabyteDB's session-level and object-level audit logging for security and compliance.

Column-level encryption

Encrypt data present in columns containing sensitive data using per-column encryption at the application layer in YugabyteDB (using symmetric and asymmetric encryption).