wood burning stoves 2.0*
The moose likes Security and the fly likes Suggestions on storing mail passwords safely Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Murach's Java Servlets and JSP this week in the Servlets forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "Suggestions on storing mail passwords safely" Watch "Suggestions on storing mail passwords safely" New topic

Suggestions on storing mail passwords safely

Karthik Shiraly
Ranch Hand

Joined: Apr 04, 2009
Posts: 489

A distributable desktop app that uses javamail has to store email account usernames and passwords, so that user doesn't have to login every time (similar to typical email clients like thunderbird and outlook).
What's a good way to store these credentials on user machines?
I'm thinking of using PKI keypair, with a private key generated on installation. But this just shifts the problem to - where to store this private key so that a malicious program can't access it. Probably I should store it in a keystore.

Or should I use something different, like OAuth?

Any suggestions? Or any idea how typical email clients store passwords?

Consider Paul's rocket mass heater.
subject: Suggestions on storing mail passwords safely
Similar Threads
Question about text encryption/decryption
Regarding: Encryption of Password in Oracle
How encrpyt all files on web server so decryptable by all users' keys?
Where to locate secret key?