Hopiu/django-fernet-encrypted-fields
1
0
Fork 0
mirror of https://github.com/jazzband/django-fernet-encrypted-fields.git synced 2026-03-16 22:40:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Updated README - added paragraph about rotating secret key

Browse source
This commit is contained in:
Vojtěch Oram 2025-02-18 15:36:46 +01:00
parent 05be6f7bc4
commit 83194fbf4c
1 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
README.md
View file

@ -39,9 +39,18 @@ SALT_KEY = [
] ]
``` ```
#### Rotating SECRET_KEY
When you would want to rotate your `SECRET_KEY`, set the new value and put your old secret key value to `SECRET_KEY_FALLBACKS` list. That way the existing encrypted fields will still work, but when you re-save the field or create new record, it will be encrypted with the new secret key. (supported in Django >=4.1)
```python
SECRET_KEY = "new-key"
SECRET_KEY_FALLBACKS = ["old-key"]
```
If you wish to update the existing encrypted records simply load and re-save the models to use the new key. If you wish to update the existing encrypted records simply load and re-save the models to use the new key.
``` ```python
for obj in MuModel.objects.all(): for obj in MuModel.objects.all():
obj.save() obj.save()
``` ```