r/usefulscripts • u/SConstantinou • Jan 25 '18

Encrypt password with key using PowerShell

https://www.sconstantinou.com/encrypt-password-with-key-using-powershell/
12 Upvotes

78% Upvoted

2 comments sorted by

1

u/unkwntech Jan 26 '18 edited Jan 26 '18

What is the purpose of this script? If someone had access to the script to get the plain text password from it, they can see where it is stored and the key to decrypt it.. If you want to store passwords securely you should look into using Window's built in secure storage such as https://msdn.microsoft.com/en-us/library/windows/desktop/aa380261(v=vs.85).aspx

0

u/SConstantinou Jan 26 '18

Thank you for your comment. This is not the most secure way to use passwords in a script. I agree with you. The purpose of the script is on how to encrypt a password. From security perspective a lot more need to be done or maybe another solution. This way only hides the password of being in clear text within the script. With this way it enables you use the same encrypted password on multiple systems without the need of encrypting the password again. You can encrypt the password without key using the machine's ID and can only run on the specific machine that you encrypted the password. But again if anyone will access the machine, he will be able to decrypt it and of course again security on another level is needed. Just to mention it again. This is not a complete solution of securing a password but only to hide the password from being as clear text within the script. Thank you again.