Forum Discussion
Data Encrption in Power BI
We are trying to use Power BI with Import Mode, how Power BI encrypt the imported data, which store in Azure Cloud?
Can you tell me the flow of encryption and decrption, and the encrption method.
Meanwhile, the same encrption key and method would be used in Data Source login credentials.?
Hi pennyhoho117,
Microsoft uses symmetric encryption to securely store your data source credentials in the cloud when configuring Power BI Service. However, the exact storage location within the cloud is not publicly disclosed. This is primarily due to security and compliance reasons, as revealing specific details about credential storage could expose the system to potential security risks.
If you find this information useful, please accept it as a solution and give it a 'Kudos' to assist others in locating it easily.
Thank you.
9 Replies
Hi pennyhoho117
When using Power BI in Import Mode, the imported data is stored in Azure Blob Storage as part of the Power BI service. Power BI automatically encrypts the imported data at rest using Microsoft-managed encryption keys (AES-256 bit encryption). The encryption process follows a two-layer security model—first, the data is stored in a proprietary compressed format, and second, it is encrypted before being written to Azure Storage. When a user accesses a report, Power BI decrypts the data in memory using the service-managed keys, ensuring secure retrieval without exposing raw data. Additionally, transport-layer security (TLS) is used to encrypt data in transit between Power BI and Azure services. For data source login credentials, Power BI encrypts them separately using Azure Key Vault-backed encryption, ensuring they are securely stored and retrieved only when needed. However, the encryption method for stored data and credentials differs; credentials use asymmetric encryption with RSA in addition to AES-256. This ensures that even if one encryption key is compromised, credentials and imported data remain secure independently.
Thanks for your detail explaination, it there any power bi document mentioned the above information?
Thanks
i would like to check it there is any architecture diagram for the storage and encryption/decryption import mode data, and data transaction, also the architecture diagram of storing the data source login credentials, encrption/decryption of login credentials, and the communicate with the data gateway
and where is the data source credentials and gateway infomation store?
Hi pennyhoho117,
Thanks for posting your query in Microsoft fabric community forum.
For detailed information regarding data encryption, data storage, credentials security, and gateway communication in Power BI, please refer to the following comprehensive document:
🔗 Power BI Security Whitepaper: https://learn.microsoft.com/en-us/power-bi/guidance/whitepaper-powerbi-securityThis document covers encryption methods, data flow, key management, and architecture diagrams that should address your questions.
If this helps, then please Accept it as a solution and dropping a "Kudos" so other members can find it more easily.
Thank you.but the security whitepaper did not mentioned about where store the data source login credentials, encrption/decryption of login credentials, and the communication with the data gateway
Hi pennyhoho117,
Thank you for your follow-up question.
Please have a look at the below link, similar query was answed by the community member.
https://community.fabric.microsoft.com/t5/Service/PowerBI-Service-DataSource-Credentials-Storage/m-p/1826348
If you find this information useful, please accept it as a solution and give it a 'Kudos' to assist others in locating it easily.
Thank you.
