On this page

Introduction¶

() is a feature that enables you to encrypt data in your

application before you send it over the network to MongoDB. With enabled, no MongoDB product has access to your data in an unencrypted form.

You can set up using the following mechanisms:

Automatic Encryption: Enables you to perform encrypted read and write operations without you having to write code to specify how to encrypt fields.
: Enables you to perform encrypted read and write operations through your MongoDB driver’s encryption library. You must specify the logic for encryption with this library throughout your application.

The following table shows which MongoDB server products support which mechanisms:

Product Name	Supports Automatic Encryption	Supports
MongoDB Atlas	Yes	Yes
MongoDB Enterprise Advanced	Yes	Yes
MongoDB Community Edition	No	Yes

To learn which MongoDB drivers support , see Compatibility.

Features¶

To learn about the security benefits of for your applications, see the <csfle-features> page.

To learn what you must install to use , see the <csfle-install> page.

To start using , see the <csfle-quick-start>.

Throughout this guide, code examples use placeholder text. Before you run the examples, substitute your own values for these placeholders.

For example:

dek_id := "<Your Base64 DEK ID>"

You would replace everything between quotes with your ID.

dek_id := "abc123"

To learn how works and how to set it up, see the <csfle-fundamentals> section.

The fundamentals section contains the following pages:

To learn how to perform specific tasks with , see the <csfle-tutorials> section.

To view information to help you develop your enabled applications, see the Reference section.

The reference section contains the following pages:

← Install and Configure mongocryptd Features →