Passwordbox data usage password#

Secondly, what techniques are available to compare two items of data obtained from the PasswordBox.SecurePassword property? This means that you cannot bind it to the “Password” property in your ViewModel. This question arises because of at least 2 problems that are normally encountered when attempting to use the PasswordBox.SecurePassword property:įirstly, the PasswordBox.SecurePassword property is not a Dependency Property and hence it cannot be the target of a binding in WPF.

Passwordbox data usage password#

For example, you might want to compare an entered password to a password already stored in a database (or the hash of the original password that has been stored). Therefore, in order to avoid compromising the security of our systems, using the PasswordBox.SecurePassword property is recommended.īut then, the popular question is “how do we then compare two passwords if we use the PasswordBox.SecurePassword property”. There are other benefits of using the SecureString class, some of which are discussed in the link above. This means that when you work with this property, your entered password is automatically encrypted in memory and not exposed as plain text. This property returns a SecureString class instance. Accessing the PasswordBox.Password property exposes the entered password as a plain string in memory, which is a security vulnerability in your system.Įnter PasswordBox.SecurePassword. This control has 2 properties that are of interest to us, Password and SecurePassword. However, in WPF there is a special control that is used for passwords. This TextBox would be bound to the Password property in the ViewModel (relationship indicated by a “2”). This password TextBox could then have a special character (typically an asterisk) configured to display instead of the actual characters that the user is entering. And you could assume that you will have a TextBox for the Password as well (particularly if you’re coming from a WinForms background) that holds the password.

The Username TextBox is bound to the Username property in the ViewModel (relationship indicated by a “1”). When planning this application this would look like a suitable structure. In this post we shall discuss one method to achieve just that.Ĭonsider the diagram below which depicts the relationship between the View (a XAML window in this case) and the ViewModel:įrom this picture you can see that the Login View has an associated LoginViewModel. If you have ever tried to build a WPF application using the MVVM design pattern you will probably have realised that there is a huddle to be overcome when you try to bind the user’s password to a property in the ViewModel.