# Encrypting the database **URL:** \ **Category:** Support\ **Created:** [February 8, 2025, 6:53am UTC](https://forum.duplicati.com/t/encrypting-the-database/20095 "2025-02-08T06:53:16Z")\ **Posts on this page:** 1\ **Showing post:** 44
**Author:** ![ts678](https://forum.duplicati.com/letter_avatar_proxy/v4/letter/t/8491ac/32.png) [@ts678](https://forum.duplicati.com/u/ts678)\ **Post date:** [June 13, 2026, 1:33pm UTC](https://forum.duplicati.com/t/encrypting-the-database/20095/44 "2026-06-13T13:33:53Z")
> [@kenkendk](#): > > However, I don’t consider the server database a thing that should be the primary backup of settings. What’s considered the primary copy? How does it fit needed use cases? [Provide option to automatically export backup configuration. #6256](https://github.com/duplicati/duplicati/issues/6256#issuecomment-3036188785) was my attempt at saying how one might backup settings, but it’s painful. I personally like portability of exports because the database might not be. [Migrating Duplicati to a new machine](https://docs.duplicati.com/configuration-and-management/migrating-duplicati-to-a-new-machine) > From version 2.3 the default is to encrypt the configuration database, and you need to decrypt it before copying. If you have disabled database encryption, you can skip the decryption step. was added, I think per my remark about it needing to be said for new plan. Good advice, but it only works if you find it, plan ahead, and get that done. > [@How to set passphrase on Windows (Windows credential storage cleared unexpected)](https://forum.duplicati.com/t/how-to-set-passphrase-on-windows-windows-credential-storage-cleared-unexpected/22483/3): > > > [@How to set passphrase on Windows (Windows credential storage cleared unexpected)](https://forum.duplicati.com/t/how-to-set-passphrase-on-windows-windows-credential-storage-cleared-unexpected/22483/1): > > > > issue caused by CCleaner, I used it yesterday, and it cleared all credentials in windows credential storage. > > Ouch! Duplicati also stores the database encryption password in there. If you wipe that, Duplicati cannot read the configuration database. highlights the settings risk that users now face by default. While the user should probably keep at least enough somewhere else to be able to run [Direct restore from backup files](https://docs.duplicati.com/getting-started/restoring-files#direct-restore-from-backup-files), having to recreate the jobs may be hard. Arguably the restore is more important, and the settings loss isn’t all-new. What’s new is the non-portable encryption-by-default makes it more likely. --- _[View the full topic](https://forum.duplicati.com/t/encrypting-the-database/20095)._