Skip to content

Text encryption

Ioan Crișan edited this page Oct 4, 2019 · 1 revision

Text encryption

Storing passwords in plain text is definitely a dangerous option. Whenever a password is required, the system accepts plain password values and encrypted values, however the strong recommendation is to use the encrypted value. Plain passwords may be used for connection testing purposes and, after a successful connection, retry it using the encrypted password and remove the plain password at the same time.

Encrypt command

  • Start the application in setup mode.
  • Issue the command: encrypt value="{password}", where {password} must be replaced with your actual password.
  • Copy the resulted encrypted password into the respective field in the configuration file.

Note that, when issuing the encrypt command, the quotation marks are strongly recommended when providing the password value. Although it is possible to ignore them, if the password contains special characters which may be interpreted as separators the command may encrypt the wrong value.

Warning: after using the encrypt command, retain the output, exit the application and clear the screen, so that nobody can see your plain text password.

Using alternative services to store the application settings may be a good option to be more secure.

Clone this wiki locally