Masking password in executable created from java

Question

I've written a small java program that required user input for login, to do other stuff. Executing the .jar file of my program masks the password as expected.

However, when I create a .exe from the same .jar and run it, the application doesn't mask the password. What should I do to make the .exe mask the password?

Console cons = System.console();
        if (cons == null) {
            System.err.println("No console.");
            System.exit(1);
        }
        String username = cons.readLine("Enter username: ");
        char[] passwd = cons.readPassword("Enter Password: ");
        String password = new String(passwd);

I'm using Console.readPassword to mask the password and I used lanuch4j to create my .exe

Do the generally right thing: use some secure hash function to hash the password, only store the hash, and when someone enters their password, check that the hash matches the hash of the correct password. — Louis Wasserman, Jul 18 '16 at 02:19
@LouisWasserman I think he's talking about echoing the password on the terminal. — chrylis -cautiouslyoptimistic-, Jul 18 '16 at 02:38

score 0 · Answer 1 · edited May 23 '17 at 11:54

0

Even if it is a command line only application, it may be possible for you to show a dialog popup just for user credentials, as discussed here. The only case this would not work is if GUI is not available (remote text-only session or some server without GUI installed).

edited May 23 '17 at 11:54

Community

1
1

answered Apr 10 '17 at 06:55

Audrius Meškauskas

20,936
12
75
93

Masking password in executable created from java

1 Answers1