July 19, 2026
Encrypted tea, searchable shade
Supabase just announced searchable encryption
Supabase says your private data can stay searchable, but commenters are yelling “show us the fine print”
TLDR: Supabase launched a tool with CipherStash that says companies can protect sensitive customer data while still searching it normally. Commenters immediately turned it into a trust debate, with skeptics demanding clearer explanations and joking that the marketing was easier to search than the facts.
Supabase just rolled out a new add-on with CipherStash that promises something companies desperately want: keep sensitive customer info locked up, but still let apps search it like normal. In plain English, that means a business could protect things like emails or health details without giving up useful features like search, sorting, and matching. For teams dealing with privacy rules, that’s a big deal — at least on paper.
But the real action was in the comments, where the vibe was less “wow” and more “okay... but what’s the catch?” One of the loudest reactions was frustration that the announcement felt packed with big promises and light on plain-language explanations. Several readers basically said: if you can still search secret data, what protection are you actually getting? Another commenter went full alarm-bell mode over a “proxy” tool for direct database access, asking if this was a “back door” in disguise.
And then came the internet’s favorite side quest: roasting the website itself. One commenter claimed the whole thing looked AI-generated, joking that users would need to “cipher out the details” because nobody was going to read that wall of text anyway. Not everyone was throwing tomatoes, though — a Prisma team member popped in with praise, saying the integration work was smooth and legit. So the crowd is split: promising privacy breakthrough or sleek marketing fog machine? The launch landed, but the trust debate absolutely stole the show.
Key Points
- •Supabase has launched an integration with CipherStash to add searchable, field-level encryption to Supabase projects.
- •The article says CipherStash’s DLAC model enforces access policies at decryption time for individual encrypted values rather than only at the row or table level.
- •CipherStash stores each encrypted value as ciphertext plus Searchable Encrypted Metadata, which the article says allows Postgres to search, sort, and join encrypted data.
- •The integration works with existing TypeScript applications and supports Supabase.js, Drizzle, and Prisma Next without requiring schema changes.
- •CipherStash Proxy provides an option for direct database access workflows by speaking the Postgres wire protocol and handling encryption and decryption transparently.