Hello, I am wondering if it is OK / Not OK to store secret (e.g. 3rd party access token) in user_metadata. Question 2: if yes, should I encrypt it in advance or is it encrypted at rest anyway. (I am not worried about an admin seeing it in the management dashboard.) Use-case: we are asking our use…

Storing secret in user_metadata

rashid779939 January 19, 2021, 6:14am 2

Hi,
Welcome to community,

Yes, you can pass any information in user_metadata as the whole user info object will be encrypted already so no need to worry about encryption. You data will be safe and secure.

Topic		Replies	Views
Storing custom user data Get Help users , custom	2	2877	July 28, 2022
Can I store secret encryption keys in app_metadata? Get Help user-profile , user-management	3	1318	January 26, 2023
Storing encryption secrets for each user Get Help	11	5889	January 9, 2020
Where to store data associated with user account? Get Help metadata	8	12779	April 1, 2021
Why data unrelated to user authentication should always be stored in an external database? Get Help auth0 , user_metadata	3	2358	April 29, 2021

Storing secret in user_metadata

Related topics