Get started

CipherStash encrypts your data at the field level, in your application, and keeps the ciphertext queryable in Postgres. The database never sees plaintext, and neither do we.

This section gets you from nothing to an encrypted, queryable field. It owns no mechanics: each page links to the reference that does.

Start here

• What is CipherStash? is the mental model. What the pieces are, what the trade is, and which door to walk through.
• Quickstart is ten minutes of typing. Encrypt a field, store it, query it without decrypting it, and read it back. It works against any Postgres: Supabase, Neon, RDS, or a container.
• Choose your stack picks your integration path: SDK or Proxy, your platform, your ORM, and your identity provider.

Then pick your path

• Adopting CipherStash into an existing app? Integrations covers the platforms, ORMs, frameworks, and auth providers that wrap your existing client, so your queries keep the shape they already have.
• Can't change the application? CipherStash Proxy sits in front of Postgres and encrypts on the wire.
• Want to understand it before you install it? Searchable encryption explains how encrypted queries work and what each query capability enables.
• Evaluating for a security review? Architecture & security is written to be read end to end, starting with Cryptography.