---
title: Manage security and authorization
description: Security, access control, and sensitive secret handling are incredibly important when handling any sort of sensitive data. This section provides information about managing the security of your InfluxDB instance.
url: https://docs.influxdata.com/influxdb/v2/admin/security/
estimated_tokens: 602
product: InfluxDB OSS v2
version: v2
---

# Manage security and authorization

This page documents an earlier version of InfluxDB OSS. [InfluxDB 3 Core](/influxdb3/core/) is the latest stable version.

#### API token hashing is enabled by default in InfluxDB OSS 2.9.0

Stronger token security: tokens are stored as hashes on disk, so a copy of the database file doesn’t expose usable tokens. Existing tokens are hashed on first startup and the original strings can’t be recovered afterward — **capture any plaintext tokens you still need before you upgrade**.

For more information, see [Token hashing](/influxdb/v2/admin/tokens/#token-hashing).

Security, access control, and sensitive secret handling are incredibly important when handling any sort of sensitive data. This section provides information about managing the security of your InfluxDB instance.

#### InfluxDB 2.x/1.x compatibility

If you [upgraded from 1.x to 2.9](/influxdb/v2/upgrade/v1-to-v2/), use the [`influx v1 auth`](/influxdb/v2/reference/cli/influx/v1/auth/) commands to manage authorizations for the [1.x compatibility API](/influxdb/v2/reference/api/influxdb-1x/).

### [Enable TLS encryption](/influxdb/v2/admin/security/enable-tls/)

Enable Transport Layer Security (TLS) and use the HTTPS protocol to secure communication between clients and InfluxDB.

### [Enable security features](/influxdb/v2/admin/security/enable-hardening/)

Enable a collection of additional security and hardening features in InfluxDB OSS to better secure your InfluxDB instance.

### [Disable development features](/influxdb/v2/admin/security/disable-devel/)

Disable development features that may not be desirable in production.

[security](/influxdb/v2/tags/security/) [authentication](/influxdb/v2/tags/authentication/)
