Enterprise-Grade API Key Encryption

Version: 1.12.1, Date: September 28, 2025

API key encryption has been upgraded from basic encoding to enterprise-grade AES-256 across every stored key in EnginifyAI. Every key is now encrypted with structured metadata, user-specific isolation, and tamper detection. This is a foundational security improvement that protects your credentials at rest while remaining fully backward compatible, so all four providers (OpenAI, Anthropic, Google, and xAI) continue to work without any action required from you. The rest of this post is grouped by app area.

Settings

• Improved: All stored API keys are now encrypted using AES-256, a widely trusted encryption standard used across the industry for protecting sensitive data. This replaces the previous encoding method with a significantly stronger security layer.
• Improved: Each user’s API keys are now encrypted with user-specific key material. Even in the unlikely event of a data breach, one user’s keys cannot be used to decrypt another user’s credentials.
• Improved: Encrypted keys now include integrity verification. If a stored key is modified outside of the normal encryption pipeline, the system detects the tampering and rejects the key rather than passing through corrupted data.
• Improved: Encrypted keys carry versioning and identification metadata, so encryption methods can be rotated in the future without disrupting your existing stored keys.
• Improved: The upgrade is fully backward compatible. Existing stored keys are handled transparently, and all four AI providers (OpenAI, Anthropic, Google, xAI) continue to function without any user action.