# Unencrypted Database

> Detects database configurations and connections missing encryption at rest and in transit.

- Skill: `zakirkun/unencrypted-database` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add zakirkun/unencrypted-database`
- Raw SKILL.md: https://api.skillmd.com/api/skills/zakirkun/unencrypted-database/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Integrations & APIs
- Author: zakirkun (https://skillmd.com/u/zakirkun)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/zakirkun/unencrypted-database

---


# Unencrypted Database

## Overview
Databases storing sensitive data must be encrypted both at rest (disk encryption) and in transit (TLS). Without encryption at rest, physical access or cloud storage access exposes all data. Without TLS, credentials and data can be intercepted on the network.

## Remediation
- Enable TLS/SSL in database connections (`sslmode=require` for PostgreSQL)
- Use encrypted database volumes (AWS RDS encryption, cloud disk encryption)
- Use SQLCipher for SQLite encryption