[Tutor] How to obfuscate a database password.

Alan Gauld alan.gauld at freenet.co.uk
Wed Apr 20 00:56:57 CEST 2005


> Is there a convention for obfuscating database passwords? 

Depends what you mean. 

Do you mean encryption at the point of use? 
That depends on the database. 

Do you mean in your program?
That usually means unobfuscating it before use and its still 
vulnerable to interception.

Do you mean while stored in a config file or environment setting?
Thats possible either programmatically or via the OS encrypted 
file system...

I'm not sure what exactly you intend to do?

Alan G.


More information about the Tutor mailing list