#Encryption

OpenTofu State Encryption: Protect Secrets at Rest

Configure OpenTofu's built-in state encryption to protect sensitive values at rest. AES-GCM with PBKDF2 or AWS KMS / GCP KMS / Azure Key Vault key providers.