At 2 AM, database credentials leak far more often than hard drives get stolen — yet most teams rely on full-disk encryption and call it done. This guide walks through the four PostgreSQL encryption approaches, their real-world trade-offs, and a concrete implementation of column-level encryption using pgcrypto to protect sensitive fields even when someone has a valid database session.