---
title: About encrypting and protecting sensitive data
description: The PingDirectory server provides an encryption settings database that holds encryption and decryption definitions to protect sensitive data. You can enable on-disk encryption for data:
component: pingdirectory
version: 11.1
page_id: pingdirectory:pingdirectory_server_administration_guide:pd_ds_encrypt_protect_sensitive_data
canonical_url: https://docs.pingidentity.com/pingdirectory/11.1/pingdirectory_server_administration_guide/pd_ds_encrypt_protect_sensitive_data.html
llms_txt: https://docs.pingidentity.com/pingdirectory/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: September 13, 2023
---

# About encrypting and protecting sensitive data

The PingDirectory server provides an encryption settings database that holds encryption and decryption definitions to protect sensitive data. You can enable on-disk encryption for data:

* in backends

* in the changelog

* in the replication databases

You can protect sensitive attributes by limiting the ways that clients can interact with them.