Credential encryption
AES-256-GCM at rest; secrets never logged.
How it works
Every connection credential is encrypted with AES-256-GCM (96-bit random IV, 128-bit auth tag) the moment it is saved. Credentials are never returned in API responses and never written to logs — verified by tamper/forgery tests.
Try it yourself
Open the console and put this into practice.