I’m trying to review my options for enabling Transparent Data Encryption on Postgres for an existing database.

The main issue is that we want to enable this but already have an existing database with tables and data.

I can find resources to enable it from scratch but not with existing data.

  • Do you mean SSL connections? Nov 16 '20 at 15:45
  • No, not SSL, TDE. Its for encryption at rest not encryption in transit. Nov 16 '20 at 15:46
  • 1
    There is no such feature built into Postgres. You can use an encrypted file system if you want encryption at rest Nov 16 '20 at 15:55
  • 1
    pgcrypto is an extension that provides functions that you can use to encrypt individual columns of a table (manually). You just install it like every other extension Nov 16 '20 at 16:02
  • 1
    pgcrypto just provides the tools you can use to do this yourself (although I wouldn't then call it "transparent"). Doing it yourself on an existing database is not fundamentally different than doing it yourself on a new database.
    – jjanes
    Nov 16 '20 at 16:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.