crypted as flag stored in the database