packages/docs/pages/advanced/credentials.md

Credentials

We need to store your credentials in order to automatically communicate with third-party services to fetch and send data when you have connections. It's the nature of our software and how automation works, but we take extra measures to keep your third-party credentials safe and secure.

Automatisch uses AES specification to encrypt and decrypt your credentials of third-party services. The Advanced Encryption Standard (AES) is a U.S. Federal Information Processing Standard (FIPS). It was selected after a 5-year process where 15 competing designs were evaluated. AES is now used worldwide to protect sensitive information.

:::danger Please be careful with the ENCRYPTION_KEY and WEBHOOK_SECRET_KEY environment variables. They are used to encrypt your credentials from third-party services and verify webhook requests. If you change them, your existing connections and flows will not continue to work. :::