Title: how secure is this setup?
Last modified: September 1, 2016

---

# how secure is this setup?

 *  [VK](https://wordpress.org/support/users/gioft99/)
 * (@gioft99)
 * [9 years, 10 months ago](https://wordpress.org/support/topic/how-secure-is-this-setup/)
 * Thanks for creating this free plugin.
 * I want to understand how secure is the setup when used with SSL. I plan to use
   it for a few product attributes and customer attributes. I see that the key is
   saved in one of the tables. If someone hacks the database, can they hack the 
   key and then decrypt everything that I have encrypted?
 * How does remote database help in making it extra secure.
 * How can we make it full proof so that no one can ever decrypt anything even if
   they are able to hack the system.
 * Thanks!
 * [https://wordpress.org/plugins/gravitate-encryption/](https://wordpress.org/plugins/gravitate-encryption/)

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Author [Gravitate](https://wordpress.org/support/users/gravitate/)
 * (@gravitate)
 * [9 years, 10 months ago](https://wordpress.org/support/topic/how-secure-is-this-setup/#post-7650651)
 * SSL is transactional encryption. Which is also preferred. This Plugin is Encryption
   at rest. When the data is resting on your database.
    The Remote Database is a
   feature for those who have requirements to store the data behind their own firewall.
   It can give you better network ownership of the data. In order to store the data
   so nobody else can decrypt it even if they get access to the Server or Database
   you should use the A-Symmetric encryption with Public and Private Key. Then remove
   the Private Key from being stored. This will allow the data to still be Encrypted,
   but not Decrypted. In order for you to get the data you will need to login in
   and add the Private Key back in then read the data then remove the Key. Keep 
   in mind this will mean that your Notifications will not work as they will need
   the key stored in the system to decrypt the data before it is emailed.
 * There are plans to make many improvements on the Plugin, but we haven’t had the
   time yet to do so.
 *  Thread Starter [VK](https://wordpress.org/support/users/gioft99/)
 * (@gioft99)
 * [9 years, 10 months ago](https://wordpress.org/support/topic/how-secure-is-this-setup/#post-7650674)
 * Thanks for the explanation!
 * I am looking for secure ways to encrypt customer information (SSN etc.) at rest
   in wordpress and decrypt it on demand when a customer tries to access that information
   from their login account.
 * It seems that if I remove the private key from system, customers will not be 
   able to decrypt and view that information. Is there any solution to that?

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘how secure is this setup?’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/gravitate-encryption_414244.svg)
 * [Gravitate Encryption](https://wordpress.org/plugins/gravitate-encryption/)
 * [Support Threads](https://wordpress.org/support/plugin/gravitate-encryption/)
 * [Active Topics](https://wordpress.org/support/plugin/gravitate-encryption/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/gravitate-encryption/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/gravitate-encryption/reviews/)

## Tags

 * [encryption](https://wordpress.org/support/topic-tag/encryption/)

 * 2 replies
 * 2 participants
 * Last reply from: [VK](https://wordpress.org/support/users/gioft99/)
 * Last activity: [9 years, 10 months ago](https://wordpress.org/support/topic/how-secure-is-this-setup/#post-7650674)
 * Status: not resolved