Out-of-the-box, Sitecore does not encrypt the information it captures from forms in the Web Forms for Marketers database. It was a known issue and you could find nice blog posts on how to implement encryption in the Web Forms for Marketers information such as http://josedbaez.com/2016/09/wffm-encryption/ and https://sitecorejunkie.com/2013/06/21/encrypt-web-forms-for-marketers-fields-in-sitecore.

Was that solved in the new Sitecore Forms? I couldn't find any information in the Sitecore documentation mentioning that.


To whom it may concern. I've managed to encrypt the data and enable the encryption at rest which I share here https://restlesscode.wordpress.com/2018/01/21/make-sitecore-forms-more-secure/.

1 Answer 1


By default, no it does not. I created a simple form, added the Save Data save action and checked the database. It was not encrypted.

enter image description here

I'm off to dig a little deeper to find if this is a setting you can configure!

  • It would be nice if you could set this up without needing to add custom code, but I am afraid, in this first release it is not available.
    – João Neto
    Nov 21, 2017 at 22:29
  • It looks that way. Just decompiled the save action and looked at the Sql DataProvider - no encryption being done in code. And no settings in the Sitecore.Experience.Forms*.config files. Nov 21, 2017 at 22:32
  • 1
    @JoãoNeto, you should use UserVoice and request that as a future feature. Nov 21, 2017 at 23:45
  • 2
    @DylanYoung I already submitted it as a user voice request. :) Nov 22, 2017 at 0:49
  • I thought encryption was part of GDPR requirements (or not?) and sitecore 9 is advertised as compliant. What am I missing here
    – josedbaez
    Dec 1, 2017 at 9:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.