I would like to quote PostgreSQL Experts (this applies to all DBs): FULL DISK ENCRYPTION IS USELESS. [1] FDE protects against… • … theft of the media. • That’s

I would like to quote PostgreSQL Experts (this applies to all DBs): FULL DISK ENCRYPTION IS USELESS. [1] FDE protects against… • … theft of the media. • That’s it. • That is about 0.00000002% of the actual intrusions that you have to worry about. • Easy rule: If psql can read it in cleartext, it’s not secure. • (It’s a great idea for laptops, of course.) And then it recommends: "Always encrypt specific columns, not entire database or disk" However encrypt your backups. I think it is fairly sensible. [1] Securing PostgreSQL [PDF], Page 31 : http://thebuild.com/presentations/pgconfeu-2016-securing-postgresql.pdf http://thebuild.com/presentations/pgconfeu-2016-securing-pos...