# Hashing plain-text password directly in configuration.nix

**URL:** https://discourse.nixos.org/t/hashing-plain-text-password-directly-in-configuration-nix/2093
**Category:** Development
**Created:** [February 10, 2019, 5:31am UTC](https://discourse.nixos.org/t/hashing-plain-text-password-directly-in-configuration-nix/2093 "2019-02-10T05:31:46Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![Ekleog](https://discourse.nixos.org/user_avatar/discourse.nixos.org/ekleog/32/50_2.png) [@Ekleog](https://discourse.nixos.org/u/Ekleog)
#### Post date: [February 10, 2019, 3:12pm UTC](https://discourse.nixos.org/t/hashing-plain-text-password-directly-in-configuration-nix/2093/3 "2019-02-10T15:12:40Z")

</div>

Vladimír čunát via Nix community [nixos1@discoursemail.com](mailto:nixos1@discoursemail.com) writes:

> That way the password would end up in plaintext in the world-readable `*.drv` file as well… EDIT: at least unless the hashing were purely evaluation-time thing, but I’m not sure about suitability of such an approach.

I think it would make sense as a follow-up to [[RFC 0005] Nix encryption by edolstra · Pull Request #5 · NixOS/rfcs · GitHub](https://github.com/NixOS/rfcs/pull/5)

---

_[View the full topic](https://discourse.nixos.org/t/hashing-plain-text-password-directly-in-configuration-nix/2093)._