Security is a crucial aspect of any application, especially when dealing with sensitive information such as passwords. Storing passwords in plain text can expose them to potential security risks. In this blog, we’ll discuss how to securely encrypt and decrypt passwords in Java and how to integrate this functionality into your Selenium automation scripts.
Why Encrypt Passwords?
Encrypting passwords ensures that they are stored in an unreadable format, reducing the risk of unauthorized access. Even if someone gains access to the stored data, encrypted passwords remain secure unless the encryption key is compromised.
Prerequisites
Before we begin, ensure you have the following:
- Java Development Kit (JDK) installed.
- Selenium WebDriver library added to your project.
- Basic understanding of Java and Selenium.
Setting Up Encryption and Decryption
We’ll use the javax.crypto package in Java, which provides the necessary classes for encryption and decryption. We’ll create two classes: EncryptionHelper for handling encryption and decryption, and SeleniumTest to demonstrate the integration with Selenium.
Step 1: Create the EncryptionHelper Class
This class contains methods to generate a secret key, encrypt a password, and decrypt a password.
Import Necessary Packages
import javax.crypto.Cipher; import javax.crypto.KeyGenerator; import javax.crypto.SecretKey; import java.util.Base64;
Define the EncryptionHelper Class
public class EncryptionHelper {
private static final String ALGORITHM = "AES"; // Algorithm for encryption
// Generate a secret key
public static SecretKey generateKey() throws Exception {
KeyGenerator keyGen = KeyGenerator.getInstance(ALGORITHM);
keyGen.init(128); // Key size can be 128, 192, or 256 bits
return keyGen.generateKey();
}
// Encrypt the password
public static String encrypt(String password, SecretKey key) throws Exception {
Cipher cipher = Cipher.getInstance(ALGORITHM);
cipher.init(Cipher.ENCRYPT_MODE, key);
byte[] encryptedPassword = cipher.doFinal(password.getBytes());
return Base64.getEncoder().encodeToString(encryptedPassword);
}
// Decrypt the password
public static String decrypt(String encryptedPassword, SecretKey key) throws Exception {
Cipher cipher = Cipher.getInstance(ALGORITHM);
cipher.init(Cipher.DECRYPT_MODE, key);
byte[] decodedPassword = Base64.getDecoder().decode(encryptedPassword);
byte[] originalPassword = cipher.doFinal(decodedPassword);
return new String(originalPassword);
}
}
Explanation
- generateKey(): Generates a secret key using the AES algorithm.
- encrypt(): Encrypts the given password using the secret key.
- decrypt(): Decrypts the given encrypted password using the secret key.
Step 2: Create the SeleniumTest Class
This class demonstrates how to use the EncryptionHelper class to encrypt and decrypt passwords within a Selenium script.
Import Necessary Packages
import javax.crypto.SecretKey;
Define the SeleniumTest Class
public class SeleniumTest {
public static void main(String[] args) {
try {
// Generate a secret key
SecretKey secretKey = EncryptionHelper.generateKey();
// Original password
String originalPassword = "password@123";
// Encrypt the password
String encryptedPassword = EncryptionHelper.encrypt(originalPassword, secretKey);
System.out.println("Encrypted Password: " + encryptedPassword);
// Decrypt the password
String decryptedPassword = EncryptionHelper.decrypt(encryptedPassword, secretKey);
System.out.println("Decrypted Password: " + decryptedPassword);
} catch (Exception e) {
e.printStackTrace();
}
}
}
Explanation
- generateKey(): Generates a secret key for encryption and decryption.
- encrypt(): Encrypts the original password.
- decrypt(): Decrypts the encrypted password back to its original form.
Output:
Integrating Encryption with Selenium
To demonstrate the integration of password encryption with a Selenium test, we will extend the SeleniumTest class to include a simple login automation script.
Import Selenium Packages
import org.openqa.selenium.By; import org.openqa.selenium.WebDriver; import org.openqa.selenium.WebElement; import org.openqa.selenium.chrome.ChromeDriver;
Update the SeleniumTest Class
public class SeleniumTest {
public static void main(String[] args) {
try {
// Generate a secret key
SecretKey secretKey = EncryptionHelper.generateKey();
// Original password
String originalPassword = "password@123";
// Encrypt the password
String encryptedPassword = EncryptionHelper.encrypt(originalPassword, secretKey);
System.out.println("Encrypted Password: " + encryptedPassword);
// Decrypt the password
String decryptedPassword = EncryptionHelper.decrypt(encryptedPassword, secretKey);
System.out.println("Decrypted Password: " + decryptedPassword);
// Set up WebDriver
System.setProperty("webdriver.chrome.driver", "path/to/chromedriver");
WebDriver driver = new ChromeDriver();
// Navigate to the login page
driver.get("https://example.com/login");
// Find username and password fields
WebElement usernameField = driver.findElement(By.id("username"));
WebElement passwordField = driver.findElement(By.id("password"));
// Enter username and decrypted password
usernameField.sendKeys("myUsername");
passwordField.sendKeys(decryptedPassword);
// Submit the login form
WebElement loginButton = driver.findElement(By.id("loginButton"));
loginButton.click();
// Close the browser
driver.quit();
} catch (Exception e) {
e.printStackTrace();
}
}
}
Advantages of Encrypting Passwords
- Security: Encrypting passwords ensures that they are not stored in plain text, reducing the risk of unauthorized access.
- Data Protection: Even if the encrypted passwords are exposed, they remain secure without the decryption key.
- Compliance: Helps in complying with security standards and regulations that mandate encryption of sensitive data.
Conclusion
Encrypting and decrypting passwords in Java is a straightforward process that significantly enhances the security of your application. By integrating this functionality into your Selenium scripts, you can ensure that sensitive data, such as passwords, is handled securely. Follow the steps outlined in this blog to implement password encryption and decryption in your projects, and enjoy the peace of mind that comes with enhanced security.
