Encrypting more sensitive information like account password, credit card numbers (if you are going to store it somewhere) is primary. Encrypting the data stored

Encrypting more sensitive information like account password, credit card numbers (if you are going to store it somewhere) is primary. Encrypting the data stored at rest in hdd's are necessary too. Other than this encrypting processed data or meta data information can considered to be secondary..