Question for Imported Data and Login credentials stored in Power BI

Hi pennyhoho117 

In Power BI, data source login credentials and gateway information are encrypted and securely stored to ensure data security. When you configure a data source through an on-premises data gateway, the credentials you provide are encrypted using symmetric encryption before being stored in the Power BI Service. These encrypted credentials cannot be decrypted in the cloud; instead, they are securely transmitted to the gateway machine, where they are decrypted locally when the gateway accesses the data source. This ensures that sensitive information, such as database credentials, remains protected throughout the data retrieval process. Additionally, Power BI encrypts data at rest using Azure Storage encryption, and by default, Microsoft manages the encryption keys. If your organization requires greater control over encryption, Power BI Premium offers the "Bring Your Own Key" (BYOK) feature, allowing you to use your own encryption keys stored in Azure Key Vault to encrypt data at rest. However, BYOK is not available for Power BI Pro users, meaning encryption for Pro users is entirely managed by Microsoft. To access encryption settings or manage BYOK, you would need a Premium capacity license. For more details on encryption and credential security, you can refer to the official Microsoft documentation on Bring Your Own Encryption Keys for Power BI.