Method SetEncryptionKey

internal/store/encryption.go:19–21

SetEncryptionKey configures the store's AES-256 encryption key for encrypting sensitive fields (e.g., TOTP secrets) at rest. The key must be exactly 32 bytes (256 bits). If empty, encryption is disabled and secrets are stored in plaintext (with a warning logged at startup).

(key []byte)

// The key must be exactly 32 bytes (256 bits). If empty, encryption is disabled
// and secrets are stored in plaintext (with a warning logged at startup).
func (s *Store) SetEncryptionKey(key []byte) {
	s.encryptionKey = key
}

// HasEncryptionKey reports whether an encryption key is configured.
func (s *Store) HasEncryptionKey() bool {