title: How does one store password hashes securely in memory, when creating accounts?
body: <p>Our web-based applications has user accounts tied down to users with the passwords specified during account creation. In the case of Java, how does one process the password securely, before persisting its hash in the database.</p>
  
  <p>To be more specific, how does one ensure that the string holding the password is garbage collected within a sufficiently short interval of time ?</p>