# Driving me bonkers! "Using unencrypted credentials"

**URL:** <https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072>\
**Category:** Feature Requests\
**Created:** [2 January 2023 17:26 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072 "2023-01-02T17:26:14Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [2 January 2023 17:26 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072/1 "2023-01-02T17:26:14Z")

</div>

Do we have to have this pasted to the debug panel every single time node-red is restarted?!

I'm working in a dev environment and I don't want to be annoyed by this each time. Could we please have a way to supress it? I don't want to encrypt my project creds in dev.

Pretty please!

---

<div class="post-metadata">

**Author:** ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)\
**Post date:** [2 January 2023 19:26 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072/2 "2023-01-02T19:26:21Z")

</div>

you mean you read the log every time you start Node-RED ? 🙂  
I use nodemon and let it auto restart things for me when I resave files, so I don't need to watch that window unless there is a problem.

---

<div class="post-metadata">

**Author:** ![tve](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/tve/32/59475_2.png) [@tve](https://discourse.nodered.org/u/tve)\
**Post date:** [2 January 2023 19:31 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072/3 "2023-01-02T19:31:34Z")

</div>

How do you know when to hit the refresh button on the browser to reload the flow editor?

---

<div class="post-metadata">

**Author:** ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)\
**Post date:** [2 January 2023 19:56 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072/4 "2023-01-02T19:56:09Z")

</div>

Feel the Rhythm

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [2 January 2023 20:48 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072/5 "2023-01-02T20:48:38Z")

</div>

> [@dceejay](#):
>
> you mean you read the log every time you start Node-RED

Only when I've screwed something up!

I wouldn't mind it only going into the log - but it doesn't - it appears in the editor's debug panel which constantly distracts from other things.

> [@tve](#):
>
> How do you know when to hit the refresh button on the browser to reload the flow editor?

??? Different issue. You reload the editor when you've changed the html file - the exact timing is something you get a feel for and depends on your setup, machine and how complex your nodes and flows are.

---

<div class="post-metadata">

**Author:** ![jbudd](https://avatars.discourse-cdn.com/v4/letter/j/5f8ce5/32.png) [@jbudd](https://discourse.nodered.org/u/jbudd)\
**Post date:** [2 January 2023 21:10 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072/6 "2023-01-02T21:10:28Z")

</div>

> [@TotallyInformation](#):
>
> Do we have to have this pasted to the debug panel every single time node-red is restarted?!

It doesn't show up for me! I only have an MQTT config in the file, but it's unencrypted:

```auto
{
    "4a46acfce798c2ed": {},
    "3a867ff696d4dc42": {},
    "b6d941184835f665": {
        "user": "admin",
        "password": "nevergiveawayyourpassword"
    }
}

```

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [2 January 2023 21:18 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072/7 "2023-01-02T21:18:12Z")

</div>

It comes from the project settings I believe:

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/c/9/c9565340ff4ab5ad9ddb39553b34d7c26c9a1026.png)

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [2 January 2023 21:20 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072/8 "2023-01-02T21:20:57Z")

</div>

:sigh: even trying to set it is a problem:

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/0/9/09c1132321d0011ede09100cbee5db7428461b5b.png)

Honestly, I only have projects turned on because I want to test them with uibuilder.

Log:

```auto
0|Node-RED | 2 Jan 21:19:43 - [error] Error

```

Editor console log:

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/8/3/837e3e9fdbabcb609588d2f6a9e9d1629d3af7cb.png)

Call stack:  
 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/1/b/1b24fda1d9ec9dbb64d4554d1ccb1e94f998279a.png)

---

<div class="post-metadata">

**Author:** ![kevinGodell](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/kevingodell/32/27040_2.png) [@kevinGodell](https://discourse.nodered.org/u/kevinGodell)\
**Post date:** [21 January 2023 14:23 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072/9 "2023-01-21T14:23:14Z")

</div>

> [@TotallyInformation](#):
>
> Log:
> 
> ```auto
> 0|Node-RED | 2 Jan 21:19:43 - [error] Error
> 
> ```

I have been using projects and also noticed this error when changing the key .

To duplicate what you have done, I changed my test project to start using a key and saved it. Viewing the file .config.projects.json file, I can see that the projects key changed from **false** to my selected key **hello**. The generic error was emitted at this point.

before:

 ![Screen Shot 2023-01-21 at 7.56.29 AM](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/3/9/39586663ca2a444174a7a8d30b19f6a32289b348.png)

after:

 ![Screen Shot 2023-01-21 at 7.57.39 AM](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/b/8/b885bae24a4e6fe75fe04981f6262a775dd10975.png)

Viewing the projects creds file at /test-project/flow\_cred.json, I could see that it was not yet encrypted. Hitting the deploy button **restart flows** caused a warning to be shown in the debug panel **Encrypted credentials not found** , which makes sense because now it is trying to use the new encryption key to decrypt the non-encrypted file.

**Changing a credential setting** in one of my nodes and then **re-deploying** triggered the flow\_cred.json file to now become encrypted and then the errors and warning never re-appeared. Changing just a non-credential setting and reploying had no effect on the creds file.

before:  
 ![Screen Shot 2023-01-21 at 7.57.02 AM](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/1/0/1021ca13f42d098368b777218cb838d99eba8651.png)

after:

 ![Screen Shot 2023-01-21 at 8.18.08 AM](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/d/f/dfb96ba73f16fc9c8bda0398fa2e7285271eb010.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [22 March 2023 14:23 UTC](https://discourse.nodered.org/t/driving-me-bonkers-using-unencrypted-credentials/73072/10 "2023-03-22T14:23:30Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.