在Java中动态保存用户名和密码信息的好/安全方法是什么？

Question

Ideally I would do this with environment variables however that is not an option for me right now. Is there some other way that I can dynamically save information such as the username and password? For the time being I am doing this

private final static String USER = "*****";
private final static String PASSWORD = "*******";

Answer 1

If you are going to persist it. Hash it with a salt

this is a good reference to start:

https://crackstation.net/hashing-security.htm#javasourcecode

you can choose to save it in a database or just plain file.