# How we store your cloud credentials

At Neverinstall, we prioritize the security of our client's data. To ensure the safe storage of all client API and access keys, we utilize 'Supabase Vault'.

### About Supabase Vault

Supabase Vault is a secure storage solution designed to store secrets without exposing any sensitive information. It is an ideal storage location for API keys, access tokens, and other secrets from external services that need to be accessed within your database.

### Key Management

We simplify the process of key management by pre-generating a unique, per-database key that is used by default. This key, known as the "root" key, is stored outside of the SQL language and can only be accessed internally in the Postgres server by the libsodium library.

The root key is managed by the pgsodium Postgres extension when the server boots, using Server Key Management.

### About pgsodium

pgsodium is a tool that provides an Encryption and Key Derivation API based on the libsodium library. It can source its root key from various places, depending on how it is configured.

Supabase generates and preserves your project's root key behind the scenes, eliminating the need for you to manage it. If you install pgsodium locally, the default configuration generates a random root key from the `/dev/urandom` device. This key is then saved in a file in your Postgres data directory.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.neverinstall.com/cloudlink/how-we-store-your-cloud-credentials.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
