Answer
How does Rook Signal encrypt keys?
With AES 256 GCM at rest. The full key is never returned to the browser.
Last updated 2026-04-24
Keys are encrypted before they touch the database. The dashboard shows only a prefix and the last four characters. Mismatch detection warns when the prefix does not match the chosen provider.