Another storage method uses Drupal’s hash_salt as an encryption key.
The hash_salt is already used as a secure key for generating one-time links, hashing passwords, and other security-critical operations. It can also be protected from being stored directly in settings.php.
If the hash_salt were ever compromised, the entire site’s security would be at risk. Because it is such a critical and trusted secret, it can also serve as a secure basis for encrypting stored data.
This module extends functionality of the Key module.
For more details, see issue issue #3028014.
Supporting organizations:
Development
Project information
- Project categories: Security
- Ecosystem: Key
1 site reports using this module
- Created by psf_ on , updated
Stable releases for this project are covered by the security advisory policy.
Look for the shield icon below.

