Unlike input(), characters are not visible as the password is typed. Python has a getpass module in its standard library made for prompting the user for passwords as console input. # ⚠️ This code displays the typed password You could request the user to type their password in the console, but the characters would be visible as they're typed. Print(f'USERNAME=') python test.py myUsername S3CR3T_P455W0RD You could store username/password on the first two lines of a plain text file, then use python to read it when you need it. Ensure the text file is never committed to source control. ⚠️ WARNING: This method is prone to mistakes. Print('deobfuscated: ' + deobfuscated) original: S3CR3T_P455W0RD Return decodedText original = 'S3CR3T_P455W0RD' ObfuscatedBytes = obfuscatedText.encode('ascii')ĭecodedBytes = base64.b64decode(obfuscatedBytes)ĭecodedText = code('ascii')

'''Demonstrate conversion to/from base 64'''ĮncodedBytes = base64.b64encode(plainBytes)ĮncodedText = code('ascii') You won't know the password just by seeing it, but anyone who has the string can easily decode it. This method is to be avoided at all costs! username = 'myUsername'Ī slightly less terrible idea is to obfuscate plain-text passwords by storing them as base 64 strings. You could put a password or API key directly in your python script, but even if you intend to remove it later there's always a chance you'll accidentally commit it to source control without realizing it, posing a security risk forever. This post reviews the most common options, starting with the most insecure and working its way up to the most highly regarded methods for managing secrets. There are many different ways to manage credentials with Python, and I was surprised to learn of some new ones as I was researching this topic.

This post explores various options for managing credentials in Python scripts in public repositories. The Python scripts I'm working on need to know my login information, but I want to commit them to source control and share them on GitHub so I have to be careful to use a strategy which minimizes risk of inadvertently leaking these secrets onto the internet. I enjoy contributing to open-source, but I'd prefer to keep my passwords to myself! Python is a great glue language for automating tasks, and recently I've been using it to log in to my web server using SFTP and automate log analysis, file management, and software updates.

Pinterest login username and password