Developer guides

How to encrypt data, handle keys and passwords, and prepare for post-quantum cryptography. Every code sample was run before it was published.

• How to Encrypt Data in Node.js with AES-256-GCM

  Working Node.js code to encrypt and decrypt data with AES-256-GCM using the built-in crypto module, and the mistakes that break it: reused IVs, hardcoded keys and ignored auth tags.

  6 min read

• Encryption API: Encrypt and Decrypt Data with One HTTP Call

  How an encryption API works, and a step-by-step example: create a managed key, encrypt a value, store the envelope and decrypt it.

  5 min read

• Post-Quantum Encryption: ML-KEM and ML-DSA in Practice

  What quantum computers break, which NIST standards replace RSA and elliptic curves, and working examples of ML-KEM-768 key exchange and ML-DSA signatures through an API.

  7 min read

• How to Encrypt Sensitive Fields in Your Database

  Disk encryption doesn't stop a leaked database dump. Learn field-level and envelope encryption, how to keep encrypted fields searchable, and how to rotate keys.

  7 min read

• How to Store User Passwords Safely: Hash, Don't Encrypt

  Looking for password encryption? Passwords should be hashed, not encrypted. Here's how to do it with Argon2id in Node.js, using the settings OWASP recommends.

  5 min read