TLS is a cryptographic network protocol that creates an encrypted channel for data sent between applications and MongoDB Atlas clusters. It preserves confidentiality and integrity, helping prevent attackers from reading or modifying traffic during transmission. section 20.5.1
Atlas applies TLS to connections and exposes these operational characteristics:
- Encrypts customer data sent to Atlas and traffic exchanged between cluster nodes. section 20.8 section 20.5.1
- Enables TLS by default and does not allow it to be disabled. section 20.5.1
- Supports selecting the TLS version; TLS 1.2 is the recommended default with a minimum key length of 128 bits. section 20.5.1
- Uses trusted certificates, ephemeral per-session keys, and OpenSSL FIPS Object Module practices for key generation, storage, replacement, and revocation. section 20.5.1
Atlas data in transit
An application sending customer data to an Atlas cluster uses a TLS-protected connection, while communication between nodes is protected as well. The resulting encrypted channel limits exposure to eavesdropping or tampering during transfer. section 20.8 section 20.5.1














