Secured secrets by default
Introduction
Confluence Data Center provides default secrets encryption, featuring AES encryption with a 256-bit key to safeguard configuration data. This enhancement ensures that secret information is secured using strong encryption standards, bolstering overall system security.
If you’re using Confluence 9.1 or earlier, this security feature isn’t available. See Secure a database password for your manual options, or consider upgrading.
Secured Confluence secrets
By default, the following secrets are automatically secured.
System secrets (
confluence.cfg.xml)hibernate.connection.password(JDBC password)confluence.cluster.authentication.secret(Hazelcast shared secret)confluence.cluster.aws.access.key(AWS cluster join access key)confluence.cluster.aws.secret.key(AWS cluster join secret key)opensearch.password(OpenSearch password)synchrony.service.authtoken(Synchrony auth token)
Plugin secrets
Mail Archiving password
Mail Server password
Last modified on Feb 3, 2025
Powered by Confluence and Scroll Viewport.