Secure

Consider these security measures when deploying your YugabyteDB cluster.

Enable authentication for all clients connecting to YugabyteDB.

Choose the appropriate authentication mechanism.

Manage users and roles, grant privileges, implement row-level security (RLS), and column-level security.

Enable encryption in transit (using TLS) to secure and protect network communication.

Enable encryption at rest in YugabyteDB (using TLS) to secure and protect data on disk.

Configure YugabyteDB's session-level and object-level audit logging for security and compliance.

Encrypt data present in columns containing sensitive data using per-column encryption at the application layer in YugabyteDB (using symmetric and asymmetric encryption).