Data Encryption

​

In Transit Encryption

Data is always encrypted in transit using TLS — both between the client and PowerSync, and between PowerSync and the source database.

​

At Rest Encryption

The client-side database can be encrypted at rest using SQLCipher.

This is currently available for:

Support for SQLCipher on other platforms is planned. In the meantime, let us know with your needs and use cases on Discord.

​

End-to-end Encryption

For end-to-end encryption, the encrypted data can be synced using PowerSync. The data can then either be encrypted and decrypted directly in memory by the application, or a separate local-only table can be used to persist the decrypted data — allowing querying the data directly.

An example implementation is coming soon.

​

See Also

• Database Setup → Security & IP Filtering
• Resources → Security