Why password should be stored in char array char[] instead of string?

In this video, I have explained - Why password should be stored in char array char[] instead of string in Java?

~~~Subscribe to this channel, and press bell icon to get some interesting videos on Selenium and Automation:

Follow me on my Facebook Page:

Let's join our Automation community for some amazing knowledge sharing and group discussion on Telegram:

Naveen AutomationLabs Paid Courses:
Java & Selenium:

Java & API +POSTMAN + RestAssured + HttpClient:

[ahamedabdulrahman]

Hi Naveen. Good content. If String's immutability is the problem, why not use StringBuffer or StringBuilder?

[subramanianr]

Please don't skip ads in Naveen's video that is how we can pay him back.

YouTube pays when ads are not skipped.

[swatibabaladi]

Appreciate how you explain things in an easy way 🙌

[vengateshm]

Awesome. Thank you for contributing to the community.

[rahuldiliprautiddpharmaceu]

Hi Naveen, this video was really very conceptual please bring up such videos keeps us updated

[rounak]

Good to finally see someone making good useful content for java aside from the stereotypical java related content.

[vishalavishala]

Thanks so much Naveen, you are showing ways to grow higher technically. Please restart Selenium coding challenge.

[jvsnyc]

I have some doubt about saying "all strings are in the SCP" (String Constant Pool). All strings live on the heap, for sure, but the only ones in the "String Constant Pool" are those found as "StringCompileConstants" in the source code, or ones that have had .intern() called on them. I think the whole rest of the discussion is still valid, however, not all of the Strings living in our program, i.e. those typed in, read from a file, database or web query, are actually in the String Constant Pool per se.
It doesn't affect the reasoning given here, but confusion about which strings are kept in the String Constant Pool can be something else asked on an interview, so I mention it.

[sreereshvkm]

Great..❤️ Thanks for sharing valuable knowledge

[ajeetgour]

I m going to apply this in my framework, thanks Naveen

[mayankchandel]

Informative video, Good content . Pls Keep sharing this type of video . Your voice is having more base, might be after your post covid recovery .

[KkdvPrasad]

@Naveen
Why not you do a video on how we work the payment details while passing through automation script?
Many of us don't know how to pass credit card details in script using any encryption techniques or from database how we fetch live credit card details in script, can you do a video for us?

[aswinimohanty]

We have two string. We have to concat those two strings. Condition: If the element of first-string getter than 4 & second string is greater than 2 then it takes only first 4 char from string 1 & 2 from String 2 otherwise as usual.

[KumarSushobhan]

Hello sir,
Question- why do we need to store password ?
We can encrypt and store it. Nowadays companies either use their own built in encryption or use available on internet.
I was asked am interview question- how do you manage credentials for an application?

[javasystems]

HI, I have two points 1) how can a hacker can reach Heap Dump or JVM crash DUMP.
We have all sort of security levels.

[voiceover_vipul]

Naveen I have one question, if by using char array for sensitive info. And PWD is printing into the logs in a garbage value. Can't hacker decrypt it. As which algo is using.

[niravdaskubavat]

Is it really possible that someone can read something from heap memory ?

[iliyas]

Thank you for sharing the knowledge. Good content but too many ads results in no sub!

[Inkeri]

if we are storing hash (bcrypt) in the database it doesnt really matter if it is a string or a char array, does it?

[sujeetgawande]

Hi Navin as a tester how I check the password is encrypted or not