OVERALL RATINGS
INSTALLS
2
SUPPORT
- Partner Supported
TRUST SIGNALS
Key highlights of the appEncrypted, permission-gated secret and attachment custom fields for Jira — hidden from anyone not explicitly allowed to see them
Encrypted, not just hidden
The value is never the field’s own Jira-visible data — only {v, hasValue, updatedAt} is. CSV export, JQL results and print view show only “Not set” or a mask, never the content, by construction.
Deny-by-default, with an audit trail
An empty allow-list means nobody can reveal or edit a value in Jira until you add a user, group, role, or JSM participant. Every reveal, edit and denied attempt is logged.
Migrate an existing plain field, safely
A two-phase wizard copies values in without touching the original, then only clears it once an admin explicitly confirms — typing an exact phrase, not a checkbox, since that step has no rollback.
Supporting media
More details
A standard Jira field’s value is readable by anyone with issue-view permission through the REST API, CSV export and JQL. Secure Field closes that gap: the raw value is never stored in the field itself.
Per field:
- AES-256-GCM encryption, server-side.
- Deny-by-default allow-list (user, group, role, assignee, JSM participant).
- Audit log nobody can edit, kept 365 days.
- Optional two-factor confirmation and auto-expiry.
- Migration wizard: encrypt an existing field, clear the original only after typed confirmation.
Backup & Key admin page: save your encryption key, export an encrypted backup linked to every task, restore after a reinstall. If you cancel, the app stays read-only so you can still reveal and export.
Secure Attachment protects a file up to 90 KB.
Good to know: values are set after the issue exists, not on create. Two-factor delivery is not connected to a provider yet. Save your key and a backup before uninstalling; uninstalling deletes stored values.
Resources
App documentation
Comprehensive set of documentation from the partner on how this app works
Privacy and Security
Privacy policy
Atlassian's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner.
Partner privacy policySecurity program
This app is not part of the Marketplace Bug Bounty program.
Integration permissions
Confidential Fields, Passwords & Files for Jira (All in One) integrates with your Atlassian app
Version information
Version 2.4.0•for Jira Cloud
- Release date
- Oct 15th 2026
- Summary
- Minor version update
- Details
- Minor version update
- Payment model
- Paid via Atlassian
- License type
- Commercial