Data Encryption

What is it?

The Data Encryption feature in DragOnce allows securing data in Input Box widgets by enabling a one-way encryption setting that cannot be disabled once activated. Data gets encrypted in the backend immediately before database storage. 

The system uses the Master Key to decrypt the current environment's encryption key, which then encrypts the user data while storing it alongside its key version. 

How and When to use it?

1. Only Root Administrator and HR can access the Admin Panel. To enter the Data Encryption in the Admin Panel, mouse over the Admin Panel Logo on the top right corner of the DragOnce web portal and click ‘Go to Admin Panel’.

Introduction of Data Encryption Properties

Setting Master Key

Users can configure the master key by inputting matching values in both the New Master Key and Confirm Master Key fields. For verification purposes, an eye icon is available to toggle visibility of the entered keys.

The system validates the entries and displays a green checkmark when they match, allowing users to continue. If they do not match, the system will show a red exclamation mark and a message that reads “Do not match”.

Master Key should contain 8 to 32 characters. The following characters are allowed:

I. A-Z

II. a-z

III. 0-9

IV. ~!@#$%^&*_+-=,.

Once the New Master Key and Confirm Master Key fields match, users can click the save button to create a Master Key.

Then the system will prompt the users to confirm the action. Click the OK button.

The Master Key is created and the log message(See Below)  is updated.

Changing Master Key

Users can alter the existing master key by entering the original master key and then input matching values in both the New Master Key and Confirm Master Key fields. For verification purposes, an eye icon is available to toggle visibility of the entered keys.

The system validates the entries and displays a green checkmark when they match, allowing users to continue. If they do not match, the system will show a red exclamation mark and a message that reads “Do not match”.

Once the New Master Key and Confirm Master Key fields match, users can click the save button to update the  Master Key.

Then the system will prompt the users to confirm the action. Click the OK button.

The Master Key is created and the log message(See Below)  is updated.

Processing and 1-hour limitation

The Master Key editing section will be locked for 1 hour after creation and each update.

The Master Key editing section will also be locked when it is processing.

Log

The Log section tracks Master Key changes, recording the Action Taker, Log Message as in action type (e.g., "Create Master Key"), IP address, and action taken Time for accountability.