{"action":"created","issue":{"url":"https://api.github.com/repos/danchoi/vmail/issues/188","labels_url":"https://api.github.com/repos/danchoi/vmail/issues/188/labels{/name}","comments_url":"https://api.github.com/repos/danchoi/vmail/issues/188/comments","events_url":"https://api.github.com/repos/danchoi/vmail/issues/188/events","html_url":"https://github.com/danchoi/vmail/issues/188","id":54316642,"number":188,"title":"Encrypt password","user":{"login":"ephexeve","id":915606,"avatar_url":"https://avatars.githubusercontent.com/u/915606?v=3","gravatar_id":"","url":"https://api.github.com/users/ephexeve","html_url":"https://github.com/ephexeve","followers_url":"https://api.github.com/users/ephexeve/followers","following_url":"https://api.github.com/users/ephexeve/following{/other_user}","gists_url":"https://api.github.com/users/ephexeve/gists{/gist_id}","starred_url":"https://api.github.com/users/ephexeve/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ephexeve/subscriptions","organizations_url":"https://api.github.com/users/ephexeve/orgs","repos_url":"https://api.github.com/users/ephexeve/repos","events_url":"https://api.github.com/users/ephexeve/events{/privacy}","received_events_url":"https://api.github.com/users/ephexeve/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-01-14T12:27:58Z","updated_at":"2015-01-14T12:57:39Z","closed_at":null,"body":"I don't feel comfortable having my password raw in a file, is there any method to encrypt it? "},"comment":{"url":"https://api.github.com/repos/danchoi/vmail/issues/comments/69912174","html_url":"https://github.com/danchoi/vmail/issues/188#issuecomment-69912174","issue_url":"https://api.github.com/repos/danchoi/vmail/issues/188","id":69912174,"user":{"login":"notalex","id":1637711,"avatar_url":"https://avatars.githubusercontent.com/u/1637711?v=3","gravatar_id":"","url":"https://api.github.com/users/notalex","html_url":"https://github.com/notalex","followers_url":"https://api.github.com/users/notalex/followers","following_url":"https://api.github.com/users/notalex/following{/other_user}","gists_url":"https://api.github.com/users/notalex/gists{/gist_id}","starred_url":"https://api.github.com/users/notalex/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/notalex/subscriptions","organizations_url":"https://api.github.com/users/notalex/orgs","repos_url":"https://api.github.com/users/notalex/repos","events_url":"https://api.github.com/users/notalex/events{/privacy}","received_events_url":"https://api.github.com/users/notalex/received_events","type":"User","site_admin":false},"created_at":"2015-01-14T12:57:39Z","updated_at":"2015-01-14T12:57:39Z","body":"Q) Should Vmail be modified to accept an encrypted password, which it decrypts before sending it to Gmail?\r\n\r\nSince this has to be a two way encryption, anyone who gets a hold of your encrypted password can easily decrypt it using Vmail source. This will be as unsafe as using plain text passwords, IMHO.\r\n\r\nQ) Will Google accept encrypted password?\r\n\r\nAFAIK, Google does not have a password encryption api. If everyone had access to the encrypted password pattern that Google uses, it would be easy to reverse engineer the algorithm used for encryption.\r\n\r\nI can think of two ways to solve this problem:\r\n\r\n1) Modify Vmail to accept password as an environment variable, which should be easy to do. There are several password managing utilities that provide you access to stored passwords using a commandline api(for e.g. lastpass). One could then start Vmail with a command that sets the environment variable from the password managing software like so:\r\n\r\n```sh\r\n  VMAIL_PASSWORD=$(some_password_manager get vmail) vmail\r\n```\r\n\r\n2) Modify Vmail to use Google's oauth2 authentication. I am not sure about how difficult implementing this would be, but it seems like an ideal solution.\r\n\r\n"}}