On this page

Introduction¶

gives you the ability to perform the following tasks:

Encrypt sensitive data fields from the client-side.
Store sensitive data fields as fully randomized encrypted data on the database server-side.
Run expressive queries on the encrypted data.

These tasks are all completed without the server having knowledge of the data it’s processing.

Sensitive data is encrypted throughout its lifecycle - in-transit, at-rest, in-use, in logs, and backups - and only ever decrypted on the client-side, since only you have access to the encryption keys.

introduces an industry-first fast, searchable encryption

scheme developed by the pioneers in encrypted search. The feature supports equality searches, with additional query types such as range, prefix, suffix, and substring planned for future releases.

You can set up using the following mechanisms:

Automatic Encryption: Enables you to perform encrypted read and write operations without you having to write code to specify how to encrypt fields.
: Enables you to perform encrypted read and write operations through your MongoDB driver’s encryption library. You must specify the logic for encryption with this library throughout your application.

The following table shows which MongoDB server products support which mechanisms:

Product Name	Supports Automatic Encryption	Supports
MongoDB Atlas	Yes	Yes
MongoDB Enterprise Advanced	Yes	Yes
MongoDB Community Edition	No	Yes

Important

No Documentation on

At present, we do not have documentation detailing how to perform: with . We will publish documentation for

this feature soon.

To learn which MongoDB drivers support , see Compatibility.

Features¶

To learn about the security benefits of for your applications, see the <qe-features> page.

Install¶

To learn what you must install to use , see the <qe-install> page.

Quick Start¶

To start using , see the <qe-quick-start>.

Fundamentals¶

To learn how works and how to set it up, see the <qe-fundamentals> section.

The fundamentals section contains the following pages:

Tutorials¶

To learn how to perform specific tasks with , see the <qe-tutorials> section.

Reference¶

To view information to help you develop your enabled applications, see the Reference section.

The reference section contains the following pages:

← In-Use Encryption Features →