To provide greater security for user accounts stored in the users.properties file, you can use the genspringpwd command-line utility (oe-install-dir/bin/genspringpwd). The utility accepts a clear-text password as input, and generates an encrypted password using the PBKDF2WithHmacSHA256 algorithm. The utility operates in FIPS mode when FIPS is enabled at the OpenEdge installation level.

GENSPRINGPWD syntax

genspringpwd password
password
A character string representing the password to be encrypted, which must be at least 14 characters long.

Store encrypted passwords

After you create an encrypted password with GENSPRINGPWD, copy and paste the generated value to the password field in the corresponding users.properties entry. Use the following syntax to store passwords in users.properties:
username=password, role1, [role2, ..., roleN, ] { enabled | disabled }