What is the best way of getting password from user?

Hello. I will work on an interface which needs user information of a client and I am looking for most secure way to get password from user. My friend suggested to get password activity. I tried to use it with my information but I don’t think it is secure because when I run program for testing, program wrote password into user name section by mistake and I could see whole password. This mistake could anytime, and I don’t want to see password of someone by mistake. Is there a way to solve this problem?

@AnnaDewitt The Credentials can be stored in the Orchestrator as an Asset and then can be retrieved using the Get Credential Activity, which will in turn return the password as a SecureString Type.

You can use this to be typed into the Password Field using the Type Secure Text Activity.

If the Situation is for an Attended case where the User will Input the String into a Dialog Box and the Bot will then enter this String into the Password field, then after you have received the password from the user, You can convert the Password in String to a Secure String in the below way, and then use the Type Secure Text Activity to Type the SecureString

secureText = new System.Net.NetworkCredential("","YourPassword").SecurePassword

Where secureText is of the Type SecureString

If this is not helpful, can you please elaborate on what actually you want to do.

Thank you for help. For instance, I tried the way you said like here:

When I write it to notepad, I can see the password. Notepad was just an example. When I am improving the program, sometimes program writes password user name box rather than password box and I can see password. My company makes this a big problem. Is there any way to convert this password to random string while storing it?

I hope it is clear.

1 Like

Hi @AnnaDewitt ,

You need to create Orchestrator assets for those users to store their password else you have to do some workflow to make the user enter the password into the required field directly.

Thank you. If I use create Orchestrator assets, do I come across same problem? I mean when I am improving program, does password can be seen my mistake?

@AnnaDewitt ,

If you are hosting it without any conversion no one can see it. It will be stored as in the encrypted format.

Check these links for more information
Please refer the below sites.

docs.uipath.com

About Assets

Assets usually represent shared variables or credentials that can be used in different automation projects. They give you the opportunity to store specific information so that the Robots can easily have access to it. Additionally, an extra level of…

docs.uipath.com

Managing Assets in Studio

Studio has two activities, Get Asset and Get Credential, that the Robot can use to extract information from assets stored in the Orchestrator database. They are displayed in the Activities panel, under Orchestrator > Assets, and…

docs.uipath.com

Managing Assets in Orchestrator

Creating Assets in a Classic Folder 1. In the Assets page, click Add. The Add Asset window is displayed. 2. In the Asset name field, enter a name for the asset. 3. From the Type list, select the type of asset you want to…

docs.uipath.com

Get Asset

UiPath.Core.Activities.GetRobotAsset Gets a specified asset by using a provided AssetName. If the asset is not global, it must be assigned to the local robot in order to be retrieved. # Properties ## Output ## Input * AssetName - The…

Does this option can be used with community license?

HI @AnnaDewitt ,
you can try using Windows credentials to store the credentials.

Thanks!