To address security of passwords and other components that require stronger protection, KBC now allows to encrypt certain values in stored configurations. All attributes prefixed with a hashmark sign (#) are automatically encrypted during save. The key is derived from the used component and project and there are no means in any UI or API to decrypt the value. The original value is available only internally and only to the app during its runtime.
What does that mean? When you save your password as an encrypted attribute, even you cannot decrypt it. It becomes available only in the application and in the project it was encrypted and the values cannot be transferred to any other apps or projects. Your passwords are safe and cannot be retrieved even by user with admin rights to your KBC project.
We hope this makes you feel safer! :-)
Note to developers and tech partners: The encryption is completely transparent. You only need 2 simple things:
- tell us that your component uses encryption
- prefix all encrypted attributes with # (eg. password => #password)
The infrastructure takes care of the rest. Your application will "see" the decrypted value.