You want to understand where and when Laravel uses encryption.
There's only three places Laravel uses the Crypt package.
- Caches. Specifically if you're using the Database Cache driver then values placed in the cache are encrypted prior to saving and decrypted when loaded.
- Cookies. Cookie values are always sent to the user encrypted. When the request loads, all cookie values are decrypted.
- Queues. Specifically if you're using the iron queue driver then values are stored in the queue encrypted and decrypted once retrieved.
See also Understanding the Request Lifecycle.
Keep in mind that cookies are handled as middleware.