Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Compete to become Power BI Data Viz World Champion! First round ends August 18th. Get started.

Reply
pennyhoho117
Helper IV
Helper IV

Question for Imported Data and Login credentials stored in Power BI

I could not find a clear power BI documents that mention the architecture of data source Login credentials, Data gateway information encrption and store in Power BI. Can you tell me details? or provide the power BI ducument for reference?

 

Note: We are having Power BI pro license, can you also tell me where can find the encryption key, or encrption method?

 

1 ACCEPTED SOLUTION
Poojara_D12
Super User
Super User

Hi @pennyhoho117 

In Power BI, data source login credentials and gateway information are encrypted and securely stored to ensure data security. When you configure a data source through an on-premises data gateway, the credentials you provide are encrypted using symmetric encryption before being stored in the Power BI Service. These encrypted credentials cannot be decrypted in the cloud; instead, they are securely transmitted to the gateway machine, where they are decrypted locally when the gateway accesses the data source. This ensures that sensitive information, such as database credentials, remains protected throughout the data retrieval process. Additionally, Power BI encrypts data at rest using Azure Storage encryption, and by default, Microsoft manages the encryption keys. If your organization requires greater control over encryption, Power BI Premium offers the "Bring Your Own Key" (BYOK) feature, allowing you to use your own encryption keys stored in Azure Key Vault to encrypt data at rest. However, BYOK is not available for Power BI Pro users, meaning encryption for Pro users is entirely managed by Microsoft. To access encryption settings or manage BYOK, you would need a Premium capacity license. For more details on encryption and credential security, you can refer to the official Microsoft documentation on Bring Your Own Encryption Keys for Power BI.

 

Did I answer your question? Mark my post as a solution, this will help others!
If my response(s) assisted you in any way, don't forget to drop me a "Kudos"

Kind Regards,
Poojara - Proud to be a Super User
Data Analyst | MSBI Developer | Power BI Consultant
Consider Subscribing my YouTube for Beginners/Advance Concepts: https://youtube.com/@biconcepts?si=04iw9SYI2HN80HKS

View solution in original post

7 REPLIES 7
Poojara_D12
Super User
Super User

Hi @pennyhoho117 

In Power BI, data source login credentials and gateway information are encrypted and securely stored to ensure data security. When you configure a data source through an on-premises data gateway, the credentials you provide are encrypted using symmetric encryption before being stored in the Power BI Service. These encrypted credentials cannot be decrypted in the cloud; instead, they are securely transmitted to the gateway machine, where they are decrypted locally when the gateway accesses the data source. This ensures that sensitive information, such as database credentials, remains protected throughout the data retrieval process. Additionally, Power BI encrypts data at rest using Azure Storage encryption, and by default, Microsoft manages the encryption keys. If your organization requires greater control over encryption, Power BI Premium offers the "Bring Your Own Key" (BYOK) feature, allowing you to use your own encryption keys stored in Azure Key Vault to encrypt data at rest. However, BYOK is not available for Power BI Pro users, meaning encryption for Pro users is entirely managed by Microsoft. To access encryption settings or manage BYOK, you would need a Premium capacity license. For more details on encryption and credential security, you can refer to the official Microsoft documentation on Bring Your Own Encryption Keys for Power BI.

 

Did I answer your question? Mark my post as a solution, this will help others!
If my response(s) assisted you in any way, don't forget to drop me a "Kudos"

Kind Regards,
Poojara - Proud to be a Super User
Data Analyst | MSBI Developer | Power BI Consultant
Consider Subscribing my YouTube for Beginners/Advance Concepts: https://youtube.com/@biconcepts?si=04iw9SYI2HN80HKS
pennyhoho117
Helper IV
Helper IV

the reference page you provided only mentioned data source credentials store to cloud, so store in which part or product in cloud? i need more detail information. and how it encrpt the data source credentials? 

<Credentials entered for the data source in Power BI are encrypted and then stored in the cloud. Only the gateway can decrypt the credentials.>

Hi @pennyhoho117,

Thank you for using Microsoft Community Forum.

Please refer to these documents to know more about where the login credentials are stored
On-premises data gateway FAQ | Microsoft Learn
Power BI security white paper - Power BI | Microsoft Learn

As per this documentation credentials that you enter for a data source are encrypted and stored in the gateway cloud service. 

vsgandrathi_0-1739360623065.png

 

For more information on on Premises Gateway: On-premises data gateway architecture | Microsoft Learn

 

Please Accept as solution if this meets your needs and a Kudos would be appreciated.

 

Regards,

Sahasra.

 

Hi @pennyhoho117,

 

I wanted to check in on your situation regarding the issue. Have you resolved it? If you have, please consider marking the reply that helped you or sharing your solution. It would be greatly appreciated by others in the community who may have the same question.

 

Thank you for being a part of the Microsoft Fabric Community.

Hi @pennyhoho117,

 

As we did not get a response, may I know if the above reply could clarify your issue, or could you please help confirm if we may help you with anything else?

 

And if the provided information meets your requirements, you can consider Accepting the solution. It helps other users who are searching for this same information and find the information.

 

Your understanding and patience will be appreciated.

Hi @pennyhoho117,

 

We wanted to follow up since we haven't heard back from you regarding our last response. We hope your issue has been resolved.

If my answer resolved your query, please mark it as Accept Answer and give us Kudos if it was helpful.

If you need any further assistance, feel free to reach out.

Thank you for being a valued member of the Microsoft Fabric Community Forum!

Helpful resources

Announcements
August Power BI Update Carousel

Power BI Monthly Update - August 2025

Check out the August 2025 Power BI update to learn about new features.

August 2025 community update carousel

Fabric Community Update - August 2025

Find out what's new and trending in the Fabric community.