I’m looking for a way to store a user’s FTP password in my database. I could store it in plaintext but I’d rather not. It will be used for persistent storage of login information so that the user can login to an FTP account without being prompted for a password (though, they do have the option of forcing a password prompt). Is there any real way of doing this?
Share
There is no real way to protect any password you have to store in your application. No matter what technique you use to obfuscate it can be reverse engineered. Or even simpler, since FTP is already a plain text protocol all someone would have to do is use your application on a network with a hub while running a packet sniffer on another client and read the password that way.