Question 1

How do I implement field-level encryption in a Phoenix app?

Accepted Answer

This project shows how by creating custom Ecto types like EncryptedField and HashField, using AES-256-GCM for encryption and SHA-256 for hashing. Follow the tutorial to integrate these into your user schema and manage keys via environment variables.

Question 2

What's the difference between this example and the 'fields' library?

Accepted Answer

This example is a tutorial for understanding the implementation details from scratch, while 'fields' is a library built by the same team that encapsulates the logic for easier use. For production apps, 'fields' reduces boilerplate and maintenance effort.

Question 3

Is AES-256-GCM secure enough for encrypting user data in a database?

Accepted Answer

Yes, AES-256-GCM is an authenticated encryption mode recommended by OWASP and widely used in industry. This example implements it with proper initialization vectors and key management, making it suitable for sensitive data.

Question 4

How can I rotate encryption keys in my Phoenix application?

Accepted Answer

The example includes key rotation by storing multiple keys in an environment variable and using key IDs in ciphertext. It demonstrates updating the ENCRYPTION_KEYS variable and decrypting data with older keys to ensure backward compatibility.

Question 5

Can I use this code directly in production?

Accepted Answer

While the patterns are production-ready, the creators advise using the 'fields' library for production. This example is best for learning or as a reference, but you'll need to maintain the code, handle updates, and ensure security audits yourself.

Question 6

How do I hash passwords with Argon2 in Elixir?

Accepted Answer

The tutorial integrates argon2_elixir as a dependency and creates a PasswordField Ecto type that automatically hashes passwords using Argon2id. It includes functions for verification and testing to ensure secure password storage.

phoenix-ecto-encryption-example

What is phoenix-ecto-encryption-example?

Overview

Use Cases

Best For

Related Projects

Found a gem we're missing?

Not Ideal For

Pros & Cons

Pros

Cons

Frequently Asked Questions