# Jetty HTTPS clear text passwords in jetty-https.xml

**URL:** <https://community.sonatype.com/t/jetty-https-clear-text-passwords-in-jetty-https-xml/10266>\
**Category:** Best Practices\
**Created:** [March 7, 2023, 6:57pm UTC](https://community.sonatype.com/t/jetty-https-clear-text-passwords-in-jetty-https-xml/10266 "2023-03-07T18:57:21Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![gary.herber](https://avatars.discourse-cdn.com/v4/letter/g/ccd318/32.png) [@gary.herber](https://community.sonatype.com/u/gary.herber)\
**Post date:** [March 7, 2023, 6:57pm UTC](https://community.sonatype.com/t/jetty-https-clear-text-passwords-in-jetty-https-xml/10266/1 "2023-03-07T18:57:21Z")

</div>

We have a mandate to eliminate or encrypt existing clear text passwords in application configurations for security reasons. Is it possible to eliminate or encrypt the passwords in jetty-https.xml in Nexus OSS, i.e. keyStorePassword, KeyManagerPassword, TrustStorePassword?