Data security (3)

Last updated Apr 21, 2026 This page details the data security properties of KV, including:

  • Encryption-at-rest (EAR).
  • Encryption-in-transit (EIT).
  • Cloudflare's compliance certifications.

Encryption at Rest

All values stored in KV are encrypted at rest. Encryption and decryption are automatic, do not require user configuration to enable, and do not impact the effective performance of KV.

Values are only decrypted by the process executing your Worker code or responding to your API requests.

Encryption keys are managed by Cloudflare and securely stored in the same key management systems we use for managing encrypted data across Cloudflare internally.

Objects are encrypted using AES-256 ↗︎, a widely tested, highly performant and industry-standard encryption algorithm. KV uses GCM (Galois/Counter Mode) as its preferred mode.

Encryption in Transit

Data transfer between a Cloudflare Worker, and/or between nodes within the Cloudflare network and KV is secured using the same Transport Layer Security ↗︎ (TLS/SSL).

API access via the HTTP API or using the wrangler command-line interface is also over TLS/SSL (HTTPS).

Compliance

To learn more about Cloudflare's adherence to industry-standard security compliance certifications, refer to Cloudflare's Trust Hub ↗︎.

Was this helpful?

YesNo

On this page

Data security (3) - 图1Docs

{"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/kv/reference/data-security/#page","headline":"Data security","description":"Workers KV encryption at rest, encryption in transit, and Cloudflare compliance certifications.","url":"https://developers.cloudflare.com/kv/reference/data-security/","inLanguage":"en","image":"https://developers.cloudflare.com/kv/reference/data-security/og.png?v=ac090d30c647746e","dateModified":"2026-04-21","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}}

description: Bind different Workers KV namespaces to the same Worker across staging and production environments. title: Environments image: https://developers.cloudflare.com/kv/reference/environments/og.png?v=414cfc55b31e25fc

Skip to content

Documentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/kv/llms.txt
Use this file to discover all available pages before exploring further.