Common practice: storing plaintext or encrypted
I'm building a simple notes app, and am storing notes in plaintext Markdown in a database. Because of some hyper-niche features, I have some interest from friends, so this app is never going to scale to more than a handful of people, but it's also not just me. Therefore, it feels kinda weird that as a DB admin, I can see all notes from all users. Therefore my question (TLDR): in applications like these, is it common practice to encrypt notes stored in a DB? If so, how would I go about doing this using Web/Node Crypto?
1 Reply
I think encryption is only necessary if there is sensitive data, like personal stuff, payment stuff or passwords etc.