Secured secrets by default

Administer Bitbucket Data Center

On this page

Still need help?

The Atlassian Community is here for you.

Ask the community

Introduction

Bitbucket Data Center provides default secrets encryption, featuring AES encryption with a 256-bit key to safeguard configuration data. This enhancement ensures that secret information is secured using strong encryption standards, bolstering overall system security.

If you’re using Bitbucket 9.1 or earlier, this security feature isn’t available. See Secure Bitbucket configuration properties for your manual options, or consider upgrading.

Security Management

Bitbucket includes a suite of tooling for managing security configurations, including key management for your default secrets encryption.

See Security management for more information.

Securing Bitbucket secrets

By default, some secrets are already automatically secured, including:

  • the search server password

  • the mail server password

  • the credentials for OAuth 1.0 application links which are stored in the database

For additional security, you can also protect your secrets (for example, a database password) stored in the bitbucket.properties configuration file.

See Secure Bitbucket configuration properties for more information.

Last modified on Jan 3, 2025

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.