diff --git a/index.ts b/index.ts
index 104eaba..2182675 100644
--- a/index.ts
+++ b/index.ts
@@ -36,6 +36,7 @@ import {
   isValidJSON,
   parseATagQuery,
 } from './utils.ts';
+import { encryptUint8Array, encryptionKey } from './utils/encryption.ts';
 import { getEveFilePath } from './utils/files.ts';
 import { log, setupLogger } from './utils/logs.ts';
 import { mixQuery, sql, sqlPartial } from './utils/queries.ts';
@@ -973,7 +974,11 @@ async function handleAddCCN(
 
     const ccnPublicKey = nostrTools.getPublicKey(privateKeyBytes);
     const ccnPrivPath = await getEveFilePath(`ccn_keys/${ccnPublicKey}`);
-    Deno.writeTextFileSync(ccnPrivPath, encodeBase64(privateKeyBytes));
+    const encryptedPrivateKey = encryptUint8Array(
+      privateKeyBytes,
+      encryptionKey,
+    );
+    Deno.writeTextFileSync(ccnPrivPath, encodeBase64(encryptedPrivateKey));
 
     db.run('BEGIN TRANSACTION');