[Feature Request] Database encryption

Ideas
1

Does Gramps provide any database encryption. I checked the docs a little and found out Gramps uses BerkeleyDB and BSDDB3 set of APIs to communicate with it. While Berkeley itself supports encryption Supporting Encryption, I do not see the support of this method in BSDDB3 Berkeley DB: C Interface by Function/Structure, so I assume the answer is no. Is there any way Gramps protects our data from unauthorized access? The idea is to prevent reading the database by anybody without password with or without Gramps, i.e. including external tools.

Gramps v.6.0.8

Debian 13 Trixie

2

@Nick-Hall can you please comment?

3

Closest existing feature request

Note that BerkeleyDB and BSDDB3 support was depreciated and reduced to Read only support.

https://www.gramps-project.org/wiki/index.php/DB-API_Database_Backend

4

Probably, but it is 10 years old and DB backend changed from SQLite to Berkeley since 2016, so the FR is already outdated.

5

and DB backend changed from SQLite to Berkeley

Other way round the default for Gramps changed from Berkeley to SQLite.

DBI-API is still used for the currently supported backends so not outdated.

6

ok, what needs to be done for it to be implemented? Users need to vote for it?

7

Why do you want to encrypt the Gramps database?
Gramps data is stored on the PC, where you run Gramps, so if the PC is well protected then the Gramps data is also protected.
I’m a bit security concerned so besides using strong password, I also use OS managed disk encryption. This means that if someone should be able to remove the harddisk, the content will not be readable.

Debian supports full disk encryption.

8

We need it for postgresql or other backends.