@growy/strapi-plugin-encrypted-field 2.4.1 → 2.4.2

package/CHANGELOG.md

@@ -2,6 +2,11 @@
 
 All notable changes to this project will be documented in this file.
 
+## [2.4.2] - 2026-02-26
+
+### Changed
+- Improved Key Rotation documentation with a detailed step-by-step foolproof guide to prevent data loss.
+
 ## [2.4.1] - 2026-02-26
 
 ### Changed

package/README.md

@@ -207,15 +207,25 @@ apiKey: "sk-1234567890abcdef"
 4. **Key backup**: Keep secure copies of keys in multiple locations
 5. **Private fields**: Mark sensitive fields as "private" to exclude them from the public API
 
-### Key Rotation
+### Key Rotation (Preventing Data Loss)
 
-If you need to change your encryption key, use the included rotation script to re-encrypt existing data:
+⚠️ **IMPORTANT**: If you change `ENCRYPTION_KEY` in your `.env` without re-encrypting your data first, **all existing data will become unreadable**.
 
-```bash
-node scripts/rotate-key.js --old=<CURRENT_64_CHAR_KEY> --new=<NEW_64_CHAR_KEY>
-```
+#### Safe Rotation Process:
+
+1. **Keep your OLD key** accessible for a moment.
+2. **Generate a NEW key** (64-character hexadecimal).
+3. **Export the encrypted values** from your database.
+4. **Run the rotation script** included in this plugin:
+   ```bash
+   # From your project root
+   node node_modules/@growy/strapi-plugin-encrypted-field/scripts/rotate-key.js --old=<OLD_KEY> --new=<NEW_KEY>
+   ```
+5. **Update your database** with the new encrypted values returned by the script.
+6. **Update your `.env`** with the `NEW_KEY`.
+7. **Restart Strapi**.
 
-The script reads encrypted values from stdin, decrypts with the old key, and re-encrypts with the new key. See the script output for database-specific integration examples (PostgreSQL, etc.).
+The script works as a pipe (stdin to stdout). See the script output or documentation for database-specific integration examples (e.g., PostgreSQL loops).
 
 ## Use Cases
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@growy/strapi-plugin-encrypted-field",
-  "version": "2.4.1",
+  "version": "2.4.2",
   "description": "Custom encrypted text field plugin for Strapi using AES-256-GCM",
   "strapi": {
     "name": "encrypted-field",