Securing data in Redis Cache

Data Encryption

Encryption in Transit

Encryption in Transit is the security of the messages sent between the application and the cache itself. The transport-level security is provided by TLS, and out-of-the-box Redis uses TLS 1.2 but also supports TLS 1.1 for compatibility purposes. HTTP connections are disabled by default as this is not recommended.

Encryption at Rest

In-memory data is not encrypted, so Redis encryption is not implemented and is not supported on Azure.

With premiums tiers, the data can be persistent and backed up to an Azure Storage account. For this data at rest, encryption is enabled and by default uses Microsoft-managed keys.