Set a strong N8N_ENCRYPTION_KEY, keep it offline, and store API keys in Credentials, not inside nodes. Protect the editor behind HTTPS, basic auth/RBAC, and optionally IP allowlists or VPN.
Some of our partner brands
Set a strong N8N_ENCRYPTION_KEY, keep it offline, and store API keys in Credentials, not inside nodes. Protect the editor behind HTTPS, basic auth/RBAC, and optionally IP allowlists or VPN.