django-fernet-encrypted-fields/README.md

72 lines
2.2 KiB
Markdown
Raw Normal View History

2021-09-30 14:27:19 +00:00
[![Pypi Package](https://badge.fury.io/py/django-fernet-encrypted-fields.png)](http://badge.fury.io/py/django-fernet-encrypted-fields)
2023-07-31 08:12:14 +00:00
[![Jazzband](https://jazzband.co/static/img/badge.svg)](https://jazzband.co/)
2021-09-30 14:27:19 +00:00
### Django Fernet Encrypted Fields
This package was created as a successor to [django-encrypted-fields](https://github.com/defrex/django-encrypted-fields).
#### Getting Started
2025-01-06 02:38:01 +00:00
2021-09-30 14:27:19 +00:00
```shell
$ pip install django-fernet-encrypted-fields
```
2025-01-06 02:38:01 +00:00
2021-09-30 14:27:19 +00:00
In your `settings.py`, set random SALT_KEY
2025-01-06 02:38:01 +00:00
2021-09-30 14:27:19 +00:00
```python
SALT_KEY = '0123456789abcdefghijklmnopqrstuvwxyz'
```
2021-09-30 14:27:19 +00:00
Then, in `models.py`
2025-01-06 02:38:01 +00:00
2021-09-30 14:27:19 +00:00
```python
from encrypted_fields.fields import EncryptedTextField
class MyModel(models.Model):
text_field = EncryptedTextField()
```
2025-01-06 02:38:01 +00:00
2021-09-30 14:27:19 +00:00
Use your model as normal and your data will be encrypted in the database.
#### Rotating SALT keys
2025-01-06 02:38:01 +00:00
You can rotate salt keys by turning the `SALT_KEY` settings.py entry into a list. The first key will be used to encrypt all new data, and decryption of existing values will be attempted with all given keys in order. This is useful for key rotation: place a new key at the head of the list for use with all new or changed data, but existing values encrypted with old keys will still be accessible
```python
SALT_KEY = [
'zyxwvutsrqponmlkjihgfedcba9876543210',
'0123456789abcdefghijklmnopqrstuvwxyz'
]
```
If you wish to update the existing encrypted records simply load and re-save the models to use the new key.
```
for obj in MuModel.objects.all():
obj.save()
```
2021-09-30 14:27:19 +00:00
#### Available Fields
Currently build in and unit-tested fields. They have the same APIs as their non-encrypted counterparts.
- `EncryptedCharField`
- `EncryptedTextField`
- `EncryptedDateTimeField`
- `EncryptedIntegerField`
- `EncryptedFloatField`
- `EncryptedEmailField`
- `EncryptedBooleanField`
2023-07-18 04:55:25 +00:00
- `EncryptedJSONField`
2021-09-30 14:27:19 +00:00
### Compatible Django Version
2025-01-06 02:38:01 +00:00
| Compatible Django Version | Specifically tested |
| ------------------------- | ------------------- |
| `3.2` | :heavy_check_mark: |
| `4.0` | :heavy_check_mark: |
| `4.1` | :heavy_check_mark: |
| `4.2` | :heavy_check_mark: |
| `5.0` | :heavy_check_mark: |
| `5.1` | :heavy_check_mark: |