In my application, I’m going to be storing sensitive data that I want to encrypt. Since I want to delegate the security responsibility to auth0, I thought about creating a unique encryption key for each user and storing it within auth0 app_metadata. Is storing secrets such as encryption keys in app…

Yes, you can pass any information in user_metadata as the whole user info object will be encrypted already so no need to worry about encryption. You data will be safe and secure. Info like this should be stored in the user’s app_metadata, not the user’s user_metadata. My Sutter Online Login

Can I store secret encryption keys in app_metadata?

Get Help

konrad.sopala January 12, 2023, 12:54pm 3

Teamwork makes the dreamwork! Thanks for sharing knowledge @Irenehicks !

Topic		Replies	Views
Storing secret in user_metadata Get Help auth0	3	3398	January 19, 2021
How to save unique key/data against user? Get Help auth0 , custom-database , user-metadata	4	4044	July 26, 2019
User encryption key for E2EE Get Help	2	2596	June 23, 2021
Differences between client_metadata and app_metadata Get Help	3	11040	March 3, 2019
Storing encryption secrets for each user Get Help	11	5982	January 9, 2020

Can I store secret encryption keys in app_metadata?

Related topics