Foundation · 2 min
What you need to know
What is encryption?
Encryption transforms readable data into protected ciphertext that requires an authorized key to recover. It reduces exposure but does not replace access control or minimization.
What does encryption in transit mean?
Encryption in transit protects data while it moves between browsers, services and networks, commonly through TLS. Both endpoints still need protection.
What does encryption at rest mean?
Encryption at rest protects stored data on disks, databases, backups or devices. Key access and application permissions determine how much protection it provides.
Encryption at rest vs in transit: what’s the difference?
In-transit encryption protects communication; at-rest encryption protects stored copies. Ecommerce systems commonly need both because data moves and persists.
What ecommerce data should be encrypted?
Encrypt sensitive personal, credential, payment-related, secret and backup data according to classification and risk. Some public catalog content may not need confidentiality.
What is HTTPS?
HTTPS is HTTP carried through TLS, providing encrypted communication and server authentication for web traffic when configured correctly.
Why does ecommerce need HTTPS?
HTTPS helps prevent interception and modification of sign-in, checkout, and browsing traffic. Use it across the entire store, not only the payment page.
What is an SSL/TLS certificate?
An SSL/TLS certificate binds a domain to a public key and lets browsers validate the server during a secure connection. Monitor issuance, renewal, and domain coverage.
A quick store check
Confirm HTTPS across storefront and admin routes, certificate monitoring, protected storage and key-management ownership.
Foundation · 2 min
Frequently asked questions
Does encryption make customer exports safe to email?
Not by itself. Use an approved secure transfer method, access controls, expiration, and minimum necessary fields.
Can an expired certificate expose checkout?
It can block trusted connections and sales; monitor renewal and test every relevant domain.