← Back to Guides

    How to Secure PlanetScale

    Step-by-step guide to securing your PlanetScale database with branching workflows and best practices.

    PlanetScale Security Context

    PlanetScale is built on Vitess, offering branching workflows and non-blocking schema changes. Key security areas include branch protection, connection security, and proper team permissions.

    Security Checklist

    1

    Configure connection passwords

    Critical

    Use strong, unique passwords for database connections.

    2

    Enable branch protection

    Critical

    Protect production branches from direct schema changes.

    3

    Review branch permissions

    Critical

    Configure appropriate access for development branches.

    4

    Use non-blocking schema changes

    Critical

    Leverage PlanetScale's non-blocking schema changes securely.

    5

    Secure connection strings

    Critical

    Store connection strings in environment variables.

    6

    Enable audit logging

    Track database operations and schema changes.

    7

    Configure team permissions

    Set appropriate access levels for team members.

    8

    Review deploy requests

    Require approval for production schema changes.

    9

    Configure Vitess settings

    Review Vitess-based security settings.

    10

    Enable SSL connections

    Verify SSL is enabled for all connections.

    11

    Review query insights

    Monitor for suspicious query patterns.

    12

    Configure connection pooling

    Set appropriate connection limits.

    13

    Review backup settings

    Verify automatic backups are configured.

    14

    Configure IP restrictions

    Restrict database access to trusted IPs.

    15

    Review organization settings

    Configure organization-level security.

    16

    Run security scan

    Use VibeEval to scan your application.

    Related Resources

    Is PlanetScale Safe?

    In-depth security analysis.

    PlanetScale Checklist

    Interactive security checklist.

    Automate Your Security Checks

    Let VibeEval scan your application for database security issues.

    Scan Your App