# FIPS 140-2 validated crypto

**URL:** <https://community.auth0.com/t/fips-140-2-validated-crypto/63078>\
**Category:** Get Help\
**Tags:** security\
**Created:** [May 19, 2021, 11:24pm UTC](https://community.auth0.com/t/fips-140-2-validated-crypto/63078 "2021-05-19T23:24:09Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![rficcaglia](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rficcaglia/32/15453_2.png) [@rficcaglia](https://community.auth0.com/u/rficcaglia)\
**Post date:** [May 19, 2021, 11:24pm UTC](https://community.auth0.com/t/fips-140-2-validated-crypto/63078/1 "2021-05-19T23:24:09Z")

</div>

Hi, I found this old thread:

> [@Any documentation on FIPS 140-2 Compliance](https://community.auth0.com/t/any-documentation-on-fips-140-2-compliance/12471):
>
> Is any part of Auth0 FIPS 140-2 compliant? I noticed that there wasn’t anything mentioned about FIPS here [Auth0 Data Privacy and Compliance](https://auth0.com/docs/compliance) . Is this accurate, if so, are there any future plans to secure FIPS Verification?

But I am hoping there is more up-to-date information. Does Auth-0 use FIPS 140-2 validated (ie has a certificate #) crypto for all its signature and encryption operations. If so the certificate #s would be appreciated!

Thanks in advance!

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [May 20, 2021, 9:17am UTC](https://community.auth0.com/t/fips-140-2-validated-crypto/63078/3 "2021-05-20T09:17:56Z")

</div>

Hey there!

Not sure about this but let me reach out to appropriate team and find more information about it!

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [June 15, 2021, 8:04am UTC](https://community.auth0.com/t/fips-140-2-validated-crypto/63078/4 "2021-06-15T08:04:02Z")

</div>

Hey there!

Sorry for a huge delay but I got caught in the huge influx of questions. Anyway I got you the answer from our product team:

No, we currently don’t use FIP 140-2 encryption. We’ve identified this as part of the fedramp analysis, but there is no ETA for that.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [June 25, 2021, 11:45am UTC](https://community.auth0.com/t/fips-140-2-validated-crypto/63078/5 "2021-06-25T11:45:44Z")

</div>


