Hashing passwords in Java servlet

Question

I earlier found this answer regarding hashing passwords in Java, but I'm using Java 7 while the answer works only in Java 8. I tried to adapt it without success, so... Any suggestions? I also downloaded the bouncycastle library, but I don't understand how it works...

Thank you for your time

Answer 1

I would suggest using Jasypt it very simple to use.

For example :

private static final String ENC_ALGORITHM = "PBEWithMD5AndDES";
...
StandardPBEStringEncryptor textEncryptor = new StandardPBEStringEncryptor();
textEncryptor.setAlgorithm(ENC_ALGORITHM);
textEncryptor.setPassword("MySuperSecretSeed"); // make sure this is stored somewhere safe like an ENV variable
String encryptedPassword = textEncryptor.encrypt("Password to be encrypted");