# Security concerns about Dremio storing data source credentials

**URL:** <https://community.dremio.com/t/security-concerns-about-dremio-storing-data-source-credentials/10672>\
**Category:** Dremio University\
**Created:** [May 30, 2023, 12:38pm UTC](https://community.dremio.com/t/security-concerns-about-dremio-storing-data-source-credentials/10672 "2023-05-30T12:38:18Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ajaybamel](https://avatars.discourse-cdn.com/v4/letter/a/a9a28c/32.png) [@ajaybamel](https://community.dremio.com/u/ajaybamel)\
**Post date:** [May 30, 2023, 12:38pm UTC](https://community.dremio.com/t/security-concerns-about-dremio-storing-data-source-credentials/10672/1 "2023-05-30T12:38:18Z")

</div>

Hi everyone!  
Hope you are all doing good.

I have some queries related to Dremio’s security, concerns more towards how Dremio stores the data source credentials.

From what I got to know while going through the below topic, Dremio stores all these credentials in RockDB in the file system.  
Check - [Where (and how) does Dremio store database credentials? - Dremio](https://community.dremio.com/t/where-and-how-does-dremio-store-database-credentials/5231)

My questions:

- Are the credentials stored secure enough? RockDB stores these in the file system. Are credentials for RockDB set to default. Is there a way to define them explicitly?
- Is there a way to provide a custom key to Dremio to encrypt data while storing?
- Or if you can suggest some way to store the credentials more securely?