---
title: About encrypting and protecting sensitive data
description: The PingDirectory server provides an encryption settings database that holds encryption and decryption definitions to protect sensitive data. You can enable on-disk encryption for data:
component: pingdirectory
version: 11.0
page_id: pingdirectory:pingdirectory_server_administration_guide:pd_ds_encrypt_protect_sensitive_data
canonical_url: https://docs.pingidentity.com/pingdirectory/11.0/pingdirectory_server_administration_guide/pd_ds_encrypt_protect_sensitive_data.html
revdate: September 13, 2023
---

# About encrypting and protecting sensitive data

The PingDirectory server provides an encryption settings database that holds encryption and decryption definitions to protect sensitive data. You can enable on-disk encryption for data:

* in backends

* in the changelog

* in the replication databases

You can protect sensitive attributes by limiting the ways that clients can interact with them.