re: How to Encrypt your Maven Password VIEW POST


Hi, thanks for the tutorial. What I don't get is what are the benefits of this approach? If someone has access to your settings xml file, wouldn't they also have access to your security-settings.xml? Both are in .m2 according to your tutorial.


Hi Ivan,

the location for settings.xml and security-settings.xml is by default your home directory ($HOME/.m2/) which is by default secured by your login (username/password). This is the first barrier and the second one of course is, as Scott wrote is that in none of them is a clear text password.

Kind regards
Karl Heinz Marbaise


With this approach, neither the settings.xml nor the security-settings.xml have a clear-text password. Both of the strings inside them are encrypted, and the actual passwords are known only to the user.


Ah, ok. So you are prompted for the master password when you try to get a dependency from your repo?

code of conduct - report abuse