# Flows-cred.json decrypt/encrypt dependency

**URL:** <https://discourse.nodered.org/t/flows-cred-json-decrypt-encrypt-dependency/78456>\
**Category:** General\
**Created:** [16 May 2023 09:12 UTC](https://discourse.nodered.org/t/flows-cred-json-decrypt-encrypt-dependency/78456 "2023-05-16T09:12:04Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Shan](https://avatars.discourse-cdn.com/v4/letter/s/7ab992/32.png) [@Shan](https://discourse.nodered.org/u/Shan)\
**Post date:** [16 May 2023 09:44 UTC](https://discourse.nodered.org/t/flows-cred-json-decrypt-encrypt-dependency/78456/2 "2023-05-16T09:44:54Z")

</div>

> [@What encryption method is used to encrypt Flow Credentials in order to trigger flows via HTTP API?](https://discourse.nodered.org/t/what-encryption-method-is-used-to-encrypt-flow-credentials-in-order-to-trigger-flows-via-http-api/73579/3):
>
> bcrypt is a password-hashing algorthm, not an encryption scheme. If we used bcrypt for the credentials, we'd never be able to decrypt them. The code Node-RED uses to encrypt/decrypt credentials is here:

---

_[View the full topic](https://discourse.nodered.org/t/flows-cred-json-decrypt-encrypt-dependency/78456)._