CODEWITHSUNDEEP
securitypasswordspassword-protectionpassword-encryption
Romper
Romper

Reputation: 2259

Securing application passwords

What are best practices in securing passwords that are using in application? For example password for database and other services.

Upvotes: 0

Views: 117

Answers (1)

Sergey Alaev
Sergey Alaev

Reputation: 3972

It all comes down to two options:

  1. configure application with passwords on deployment. E.g. properties file, command-line parameters or env variables
  2. pull passwords from secure password repository

And one rule:

Accessing production passwords should require the same privileges as modifying production application that uses that passwords. E.g. passwords should be available only to application and deployment script of that application.

Details really depend on your infrastructure and requirements.

Upvotes: 2

Related Questions