Is My Connection Encrypted?
Yes. There are multiple layers of encryption protecting your data when you use DBEverywhere.
The Two Segments
A connection through DBEverywhere has two segments, each with its own encryption:
Your Browser <--[1]--> DBEverywhere <--[2]--> Your Database
1. Browser to DBEverywhere — HTTPS (TLS)
All traffic between your browser and DBEverywhere is encrypted with TLS via HTTPS. This is enforced at the infrastructure level — HTTP requests are redirected to HTTPS automatically. This protects your credentials and everything you see in phpMyAdmin or Adminer from being intercepted between your browser and our server.
2. DBEverywhere to Your Database — SSL/TLS
DBEverywhere connects to your database with SSL/TLS encryption enabled. For MySQL and MariaDB, SSL is enabled by default on the connection. For PostgreSQL and other engines through Adminer, SSL is used where the server supports it.
Most managed database providers (DigitalOcean, AWS RDS, PlanetScale, Supabase, Neon, etc.) have SSL enabled by default, so this works automatically.
You may see a warning in phpMyAdmin about "SSL with disabled verification." This means encryption is active but certificate hostname verification is disabled — the connection is still encrypted. See "SSL Is Used with Disabled Verification" for a full explanation.
What About Credentials?
Your database credentials are encrypted at every stage:
- In transit: protected by HTTPS (browser to us) and SSL/TLS (us to your database)
- At rest: if you save a connection (paid), credentials are encrypted with AES-256-GCM
- In memory: credentials exist in plaintext only in the application process during an active session, and are wiped when the session ends
See How Are My Database Credentials Handled? for full details on credential lifecycle.
What's NOT Encrypted
- Connection metadata (database host, port, database type, session timestamps) is stored unencrypted in our internal database. This is operational data needed to manage sessions.
- Your database contents never touch our storage at all — queries and results flow between phpMyAdmin/Adminer and your database directly. We don't log or store them.