Unverified50% confidenceFactExact time
Dify encrypts and stores API Keys on the server side, automatically including them during workflow calls so developers do not need to manually pass them in at each node.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/11/2026
First Seen
Valid until: 12/10/2026
Sources
Related Entities
Related Claims
UnverifiedClient-side encryption means encryption keys are held solely by the user, preventing server-side access to plaintext, so AI transcription and summarization features cannot be implemented in the cloud, representing a fundamental trade-off between security and functionality.71% similarUnverifiedWeb Crypto API提供AES-GCM、RSA-OAEP、ECDH等标准密码学原语，运算在浏览器底层执行，不暴露密钥给JavaScript运行时71% similarUnverifiedReplit提供Secrets功能用于环境变量安全存储，将API Key等敏感信息加密存储在服务器端，代码运行时自动读取70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/909665API
curl https://kongchang.com/api/v1/knowledge/claims/909665MCP
get_claim(id=909665)