Using jasypt for Encryption and Decryption in Spring Boot

Learn how to use jasypt in Spring Boot projects to encrypt and decrypt sensitive configurations (such as database passwords), including dependency setup, configuration files, and encryption/decryption methods.

5/26/2024 spring #springboot

Some configurations in projects need to be encrypted, such as database passwords. Jasypt can implement encryption and decryption functionality.

1. Add Dependency

<dependency>
    <groupId>com.github.ulisesbocchio</groupId>
    <artifactId>jasypt-spring-boot-starter</artifactId>
    <version>3.0.5</version>
</dependency>

2. Configuration File

Before Encryption

spring:
  datasource:
    password: 123456

After Encryption

spring:
  datasource:
    password: ENC(slZULLmbudl1M6/43iq6y8100XQ4DlqnxtToLxtUODxqlsCm02M2ujbx6ayy4j92)

3. Encryption

Here’s an example using AES256

// Specify algorithm
AES256TextEncryptor textEncryptor = new AES256TextEncryptor();
// Specify secret key
textEncryptor.setPassword("test");
// Generate encrypted data
String encrypt = textEncryptor.encrypt("123456");
System.out.println(encrypt);
// slZULLmbudl1M6/43iq6y8100XQ4DlqnxtToLxtUODxqlsCm02M2ujbx6ayy4j92

4. Decryption

4.1 IDE Configuration

Add the following to VM options:

-Djasypt.encryptor.password=test

IDEA jasypt Configuration

4.2 Running

java -jar -Djasypt.encryptor.password=test xxx.jar

4.3 Test Classes

For classes that need unit testing, just add the @Import(EnableEncryptableProperties.class) annotation to the class