9

Out-of-the-box, Sitecore does not encrypt the information it captures from forms in the Web Forms for Marketers database. It was a known issue and you could find nice blog posts on how to implement encryption in the Web Forms for Marketers information such as http://josedbaez.com/2016/09/wffm-encryption/ and https://sitecorejunkie.com/2013/06/21/encrypt-web-forms-for-marketers-fields-in-sitecore.

Was that solved in the new Sitecore Forms? I couldn't find any information in the Sitecore documentation mentioning that.

Update

To whom it may concern. I've managed to encrypt the data and enable the encryption at rest which I share here https://restlesscode.wordpress.com/2018/01/21/make-sitecore-forms-more-secure/.

8

By default, no it does not. I created a simple form, added the Save Data save action and checked the database. It was not encrypted.

enter image description here

I'm off to dig a little deeper to find if this is a setting you can configure!

  • It would be nice if you could set this up without needing to add custom code, but I am afraid, in this first release it is not available. – João Neto Nov 21 '17 at 22:29
  • It looks that way. Just decompiled the save action and looked at the Sql DataProvider - no encryption being done in code. And no settings in the Sitecore.Experience.Forms*.config files. – LonghornTaco Nov 21 '17 at 22:32
  • 1
    @JoãoNeto, you should use UserVoice and request that as a future feature. – Dylan Young Nov 21 '17 at 23:45
  • 2
    @DylanYoung I already submitted it as a user voice request. :) – LonghornTaco Nov 22 '17 at 0:49
  • I thought encryption was part of GDPR requirements (or not?) and sitecore 9 is advertised as compliant. What am I missing here – josedbaez Dec 1 '17 at 9:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.