When storing sensitive data such as passwords or license keys, the main concern is to ensure its proper protection.
Secure Password Custom Field enables you to store private information behind a secure mask and prevent unauthorized access to it.
Secure Password Configuration
Secure Password Field uses the Advanced Encryption Standard with a 256-bit key.
You can set your own Encryption key to ensure the highest protection and prevent your secure data from being accessed by the system administrator.
If the Encryption key is not specified, the system will use the default one. A default key is strictly connected to your instance, so you can’t restore data encrypted by one instance in another one (it does not impact backups and restores, as instance data for default key are stored in the backup file).
Warning |
---|
Important: Customization must be done before any issue with the Password field is created. |
You can add one Encryption key for all Password fields or set specific keys for each one.
To set custom key(s) you need to add a special property to the properties file called jira-config.properties. More about using properties you can read here.
Adding property for all Password fields:
com.coresoftlabs.secureFields.global.password.secret
com.coresoftlabs.secureFields.global.password.secretFilePath
Adding property for a specific Password field:
com.coresoftlabs.secureFields.{FIELD_ID}.password.secret
com.coresoftlabs.secureFields.{FIELD_ID}.password.secretFilePath
Example: com.coresoftlabs.secureFields.customfield_10201.password.secretFilePath=/var/atlassian/application-data/encryption-keys/myfile.txt
Please note: Properties can be mixed, they are loaded in the following order:
com.coresoftlabs.secureFields{FIELD_ID}.password.secretFilePath
com.coresoftlabs.secureFields.{FIELD_ID}.password.secret
com.coresoftlabs.secureFields.global.password.secretFilePath
com.coresoftlabs.secureFields.global.password.secret
The plugin uses the first property found on the list. If none is found - it will use the default one.
Important: once the property is set (default or custom one) it cannot be modified as its change will deny the possibility to decrypt previously added field values.
Manage apps → Secure fields → Secure Password Settings