SpringSecurity : decode a password encoded with PasswordEncoder

Question

I have stored (and encoded) an email password. I have used PasswordEncoder (Spring security).

passwordEncoder.encode(password);

Now I need to decode it in order to use it in javax mail. (the password is used to connect to the email provider(yahoo, gmail, etc).
Is there a way to decode this password?

There isn't... Passwords are encrypted using a one way algorithm, it isn't the password that is stored but a calculated hash of the password. So there isn't a way to recover the actual password. As it should... — M. Deinum
– M. Deinum, Commented Sep 14, 2015 at 7:30
Ok, thanks. Does Spring provides a password encode/decode api? or do you know a robust java password encode/decode api? — user1260928
– user1260928, Commented Sep 14, 2015 at 7:34
you can use jasypt, but being able to decrypt passwords is a possible security breach. — M. Deinum
– M. Deinum, Commented Sep 14, 2015 at 7:36
A must read for password encryption/decryption is jasypt.org/howtoencryptuserpasswords.html — Shailendra
– Shailendra, Commented Sep 14, 2015 at 7:47

Shailendra · Accepted Answer · 2015-09-14 08:00:16Z

7

PasswordEncoder interface support only encoding and matching which is the best way to deal with password as others too have suggested. You can use StandardPBEStringEncryptor provided by Jasypt library as this library had transparent integration with Spring Security. Else you can roll out your own using Java Cryptography Extension's Password Based Encryption (PBE) however before trying what you want to achieve with regards to password encryption you must definitely read this.

edited Sep 14, 2015 at 8:00

answered Sep 14, 2015 at 7:53

Shailendra

9,1122 gold badges30 silver badges38 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

SpringSecurity : decode a password encoded with PasswordEncoder

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related