juspay/hyperswitch · error

Failed to decrypt database password

Error message

Failed to decrypt database password

What it means

Error "Failed to decrypt database password" thrown in juspay/hyperswitch.

Source

Thrown at crates/drainer/src/secrets_transformers.rs:38

        Ok(value.transition_state(|db| Self {
            password: raw_db_password,
            ..db
        }))
    }
}

/// # Panics
///
/// Will panic even if fetching raw secret fails for at least one config value
pub async fn fetch_raw_secrets(
    conf: Settings<SecuredSecret>,
    secret_management_client: &dyn SecretManagementInterface,
) -> Settings<RawSecret> {
    #[allow(clippy::expect_used)]
    let database = Database::convert_to_raw_secret(conf.master_database, secret_management_client)
        .await
        .expect("Failed to decrypt database password");

    Settings {
        server: conf.server,
        master_database: database,
        redis: conf.redis,
        log: conf.log,
        drainer: conf.drainer,
        encryption_management: conf.encryption_management,
        secrets_management: conf.secrets_management,
        multitenancy: conf.multitenancy,
    }
}

View on GitHub (pinned to 705a321950)

Solutions

1. Verify the KMS/master key configuration used to decrypt the database password
2. Ensure the encrypted password value in config matches the configured encryption key

When it happens

Trigger: Thrown at crates/drainer/src/secrets_transformers.rs:38 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of juspay/hyperswitch@705a321950 (2026-08-19). Data as JSON: /api/errors/9d099c8a0d8cfc46. Report an issue: GitHub.