Security

Graphlytic user password

Passwords of Graphlytic users are stored encrypted. BCypt encryption function is used (see Bcrypt on Wikipedia). This function is used at OS: BSD, SUSE Linux and other. It is generally considered safe for this purpose.

Communication

Browser - Graphlytic

Connection between Browser and Graphlytic should be configured to use HTTPS. Graphlytic is delivered with configuration to use self signed certificate for HTTPS. You can use your own valid certificate for HTTPS.

You can also use Apache, nginx or other web servers with HTTPS configured. Communication between the web server and Graphlytic can then be HTTP.

Graphlytic - Neo4j

Connection between Graphlytic and Neo4j is using the Bolt protocol. Bolt protocol uses unencrypted communication as default. It can be configured to use TLS encryption, but the database needs to explicitly support encrypted bolt communication. See more in Neo4j Driver and Neo4j Operations Manual.