title: How to solve Password Management - Password in configuration
body: <p>Hi I am using HP fortify to find all vulnerabilities of my App, and now i am trying to solve one that seems basic but I am not able to do it.</p>
  
  <p>The problem is about password in configuration. I have an web application and inside of it in a properties file something like this.</p>
  
  <pre><code>somePassword=passwordPlainText
  </code></pre>
  
  <p>I agree this is wrong, then i try to obfuscate with several methods using <a href="http://www.jasypt.org/encrypting-configuration.html" rel="nofollow noreferrer">http://www.jasypt.org/encrypting-configuration.html</a>, OBS, CRYPT and ENC types. But I always get the same warning from fortify when i scan my code. Am I doing something wrong? </p>
  
  <p>Thanks</p>