Security
Security features and best practices for Supascale.
Supascale includes comprehensive security features to protect your self-hosted Supabase infrastructure. This section covers security scanning, access control, encryption, and best practices.
Security Overview
Supascale provides multiple layers of security:
- Two-Factor Authentication: TOTP-based 2FA with backup codes for enhanced login security
- SSL/TLS Certificates: Automatic Let's Encrypt integration and custom certificate support
- Security Scanning: Automated RLS auditing, coverage analysis, and storage security checks
- Encryption: AES-256 encryption for sensitive data at rest
- Password Security: Strong password requirements with rate limiting
- Access Control: Session-based authentication with granular API key permissions
Quick Links
- Two-Factor Authentication - Set up TOTP-based 2FA
- Security Scanning - Audit your database security
- Encryption - How Supascale protects sensitive data
- Password Security - Password requirements and best practices
- SSL Certificates - Configure HTTPS for your projects
- API Key Management - Create and manage API keys (in Configuration)
Security Best Practices
- Enable two-factor authentication for all admin accounts
- Always use HTTPS in production environments
- Enable RLS on all database tables containing user data
- Rotate API keys periodically and revoke unused keys
- Monitor security scans and address findings promptly
- Keep Supascale updated for latest security patches
- Store 2FA backup codes securely in a password manager