# DB encryption in 2.2.0.3\_stable (Linux)
**URL:** https://forum.duplicati.com/t/db-encryption-in-2-2-0-3-stable-linux/22016
**Category:** Uncategorized
**Created:** [February 21, 2026, 2:23pm UTC](https://forum.duplicati.com/t/db-encryption-in-2-2-0-3-stable-linux/22016 "2026-02-21T14:23:36Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Tama](https://forum.duplicati.com/u/Tama)
#### Post date: [February 21, 2026, 2:23pm UTC](https://forum.duplicati.com/t/db-encryption-in-2-2-0-3-stable-linux/22016/1 "2026-02-21T14:23:37Z")
I installed 2.2.0.3\_stable, in [Release: 2.2.0.102 (Canary) 2025-12-12](https://forum.duplicati.com/t/release-2-2-0-102-canary-2025-12-12/21727) I read Duplicati now uses a “default secret provider”. I’m assuming this is part of 2.2.0.3\_stable (?)
I went and installed pass and initialized it. However when I run duplicati it keeps showing the legend:
> No database encryption key was found. The database will be stored unencrypted. Supply an encryption key via the environment variable SETTINGS\_ENCRYPTION\_KEY or disable database encryption with the option --disable-db-encryption
How to make duplicati to use pass?
(I customized the folder used by pass by setting PASSWORD\_STORE\_DIR, could that be the reason it’s not finding it?)
---
### Author:  [@kenkendk](https://forum.duplicati.com/u/kenkendk)
#### Post date: [February 21, 2026, 2:43pm UTC](https://forum.duplicati.com/t/db-encryption-in-2-2-0-3-stable-linux/22016/2 "2026-02-21T14:43:32Z")
> [@Tama](#):
>
> I read Duplicati now uses a “default secret provider”. I’m assuming this is part of 2.2.0.3\_stable (?)
No, it is only in the canary, not yet in stable.
> [@Tama](#):
>
> How to make duplicati to use pass?
You need to pass the commandline argument:
```plaintext
--secret-provider=pass:// --settings-encryption-key=$duplicati-server-encryption-key
```
Then make sure the database encryption key is stored in `pass` under `duplicati-server-encryption-key`. Once the next stable is released, you can then remove the two arguments, as that will be the default setting.
---
### Author:  [@Tama](https://forum.duplicati.com/u/Tama)
#### Post date: [February 22, 2026, 6:03pm UTC](https://forum.duplicati.com/t/db-encryption-in-2-2-0-3-stable-linux/22016/3 "2026-02-22T18:03:42Z")
Thanks, by using that I don’t get the warning anymore when starting Duplicati.
Now, how to confirm it is encrypted? I am browsing the DBs, in the server DB I see multiple fields are readable, but for example Backup.TargetURL seem to be encrypted, as the text starts with “enc-v1…”
In the other DB I can see for example PathPrefix.Filter is not encrypted, is that expected?
---
### Author:  [@kenkendk](https://forum.duplicati.com/u/kenkendk)
#### Post date: [February 23, 2026, 8:18am UTC](https://forum.duplicati.com/t/db-encryption-in-2-2-0-3-stable-linux/22016/4 "2026-02-23T08:18:04Z")
> [@Tama](#):
>
> for example Backup.TargetURL seem to be encrypted, as the text starts with “enc-v1…”
Then the database is encrypted.
> [@Tama](#):
>
> In the other DB I can see for example PathPrefix.Filter is not encrypted, is that expected?
Yes, only fields that are considered “sensitive” will be encrypted.