Encrypt sensitive fields

Before you start

• Beezr Shield

Encrypting a field protects its values at rest, for example a national ID or a bank account. You add a key once, then choose it on each field that needs protection.

Add a key

1. Open Account settings › Users & Security and choose Encryption Keys.
2. Click Add New Key.
3. Type a Key Alias that says what the key is for, for example Primary Database Key. Each alias is used once.
4. Describe the key in Description if you wish.
5. Paste your key into Encryption Key. Use a Base64, PEM or hex key of at least 32 characters.
6. Click Save Encryption Keys.

Beezr shows “Encryption key ‘Primary Database Key’ has been created successfully.” The key is stored encrypted in the vault, and its tag reads ACTIVE.

○ ○ ○Beezr

×

Add New Key opens the dialog.
Read Key Management Best Practices before you start.
Each row shows the alias, description and creation date.

Tip from a Beezr Consultant

Keep a copy of every key in your company’s password vault. Beezr stores it encrypted, and your own copy is what lets you recover.

Encrypt a field

1. Open the module’s Fields page and click Add field.
2. Fill in the label and type.
3. Under Storage, switch on Encrypt values.
4. Pick the Encryption key.
5. Click Save field.

The panel shows Encryption active. Choose the encryption when you create the field, and use it for values people read on the record, such as an ID number.

Delete a key

Click Delete on a key. If fields use it, Beezr lists them and asks you to remove the key from those fields first.

Keep the key active for as long as a field uses it. The field relies on it to read its values.