Home/ Questions/Q 7024575
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-27T23:51:30+00:00

Since Java 1.2, JPasswordField.getText() has been deprecated for security reasons, ecouraging usage of getPassword()

  • 0

Since Java 1.2, JPasswordField.getText() has been deprecated “for security reasons”, ecouraging usage of getPassword() method “for stronger securty”.

However, I was able to get the password stored in JPasswordField at least in Oracle JRE 1.7 by analysing the heap dump (JPasswordField instance -> model -> s -> array).

So how does JPasswordField.getPassword() helps to protect the password?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Well, the documentation for it states:

    For stronger security, it is recommended that the returned character array be cleared after use by setting each character to zero.

    But, of course, if you use the getText method, you get back a String, which is immutable, so you couldn’t carry out the same recommendation.

    • 0