---
title: Manage security and authorization
description: Security, access control, and sensitive secret handling are incredibly important when handling any sort of sensitive data. This section provides information about managing the security of your InfluxDB instance.
url: https://docs.influxdata.com/influxdb/v2/admin/security/
estimated_tokens: 427
product: InfluxDB OSS v2
version: v2
publisher: InfluxData
canonical: https://docs.influxdata.com/influxdb/v2/admin/security/
date: '2023-11-06T15:53:12-07:00'
lastmod: '2023-11-06T15:53:12-07:00'
---

This page documents an earlier version of InfluxDB OSS.[InfluxDB 3 Core](/influxdb3/core/) is the latest stable version.

#### API token hashing is enabled by default in InfluxDB OSS 2.9.0

Stronger token security: tokens are stored as hashes on disk, so a
copy of the database file doesn’t expose usable tokens. Existing
tokens are hashed on first startup and the original strings can’t
be recovered afterward — **capture any plaintext tokens you still
need before you upgrade**.

For more information, see [Token hashing](/influxdb/v2/admin/tokens/#token-hashing).

Security, access control, and sensitive secret handling are incredibly important
when handling any sort of sensitive data.
This section provides information about managing the security of your InfluxDB instance.

#### InfluxDB 2.x/1.x compatibility

If you [upgraded from 1.x to 2.9](/influxdb/v2/upgrade/v1-to-v2/),
use the [`influx v1 auth`](/influxdb/v2/reference/cli/influx/v1/auth/) commands
to manage authorizations for the [1.x compatibility API](/influxdb/v2/reference/api/influxdb-1x/).

### [Enable TLS encryption](/influxdb/v2/admin/security/enable-tls/)

Enable Transport Layer Security (TLS) and use the HTTPS protocol to secure communication between clients and InfluxDB.

### [Enable security features](/influxdb/v2/admin/security/enable-hardening/)

Enable a collection of additional security and hardening features in InfluxDB OSS to better secure your InfluxDB instance.

### [Disable development features](/influxdb/v2/admin/security/disable-devel/)

Disable development features that may not be desirable in production.

[security](/influxdb/v2/tags/security/)[authentication](/influxdb/v2/tags/authentication/)