How to encrypt MongoDB database using Node js

Question

I have mongoDb database, I want all data to be encrypted, how we can do this by using nodejs. All the key values should be encrypted.

This is not a concern with MongoDB. You can encrypt the data before storing it regardless of DB and maintain a master key. — Lex
– Lex, Commented Jan 9, 2019 at 5:37
@Lex can you please explain how we can do this, I am new to mongoDb, any help will be appreciated — Vishal Rana
– Vishal Rana, Commented Jan 9, 2019 at 5:44
@VishalRana take a look at this article lollyrock.com/posts/nodejs-encryption , set up a dummy node project to test it out. Encryption is a two way process that uses a hidden secret key to encode/decode. As long as you know the key you can decrypt. So prior to storing in Mongo encrypt plain text or objects. And when you want to read decrypt — Lex
– Lex, Commented Jan 9, 2019 at 5:58
Please verify wether you want the data on rest to be encrypted or the actual values. For the former, there is a plethora of options. — Markus W Mahlberg
– Markus W Mahlberg, Commented Jan 9, 2019 at 7:24

Lex · Accepted Answer · 2019-07-23 22:11:36Z

2

This is not a concern with MongoDB. You can encrypt the data before storing it regardless of DB and maintain a master key.

Encryption is a two way process that uses a hidden secret key to encrypt/decrypt. As long as you know the master key you can decrypt. So prior to storing in Mongo encrypt plain text or objects. And when you want to read decrypt.

You'll add a performance overhead to encrypt/decrypt all your data. And you'll loose the ability to query data freely. But if it's sensitive user data you're taking the right path. As long as your master KEY is kept secret even if your database is stolen the data is still safe.

Take a look at this article https://lollyrock.com/posts/nodejs-encryption/ , and set up a dummy node project to test it out. Try encrypting and decrypting and print out the output.

edited Jul 23, 2019 at 22:11

answered Jan 9, 2019 at 6:03

Lex

5,0844 gold badges48 silver badges70 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

kRiZ · Accepted Answer · 2019-01-09 05:36:41Z

1

MongoDB Enterprise provides you option to encrypt the database.

You can use Mongoose-encryption package for simple encryption and authentication of mongoose documents.

answered Jan 9, 2019 at 5:36

kRiZ

82510 silver badges14 bronze badges

2 Comments

Vishal Rana Over a year ago

I am using Mongoose-encryption, but some of the methods are not working. Like find() is working but findOne() not.

kRiZ Over a year ago

findOne() is expected to work. But,if you had encrypted multiple documents at once,as per documentation, you cannot select individual encrypted fields in a query nor unset or rename encrypted fields via an update operation.

Collectives™ on Stack Overflow

How to encrypt MongoDB database using Node js

2 Answers 2

Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related