# Username Password encryption

**URL:** <https://devforum.okta.com/t/username-password-encryption/23260>\
**Category:** OAuth/OIDC\
**Created:** [February 6, 2023, 5:26am UTC](https://devforum.okta.com/t/username-password-encryption/23260 "2023-02-06T05:26:35Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![sanchita](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@sanchita](https://devforum.okta.com/u/sanchita)\
**Post date:** [February 6, 2023, 5:26am UTC](https://devforum.okta.com/t/username-password-encryption/23260/1 "2023-02-06T05:26:35Z")

</div>

Hi ,

Hi, I have integrated the okta widget in my angular application. This is my npm module used@okta/okta-signin-widget: ^5.16.1 and have added the code. For the login process have simply called the showSignInToGetTokens function with all the necessary configurations of okta to have this widget but when I click on submit button on my UI page for login the username and password goes in plain text which I want that to be encrypted and not finding any solution any support will be really appreciated . Have added a sample screenshot for the same .

 ![Screenshot 2023-02-03 at 9.19.56 AM](https://global.discourse-cdn.com/oktadev/original/2X/5/55b2b86f02b3d51283923a2e5cb15ce5a3a9629c.png)

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [February 6, 2023, 7:21pm UTC](https://devforum.okta.com/t/username-password-encryption/23260/2 "2023-02-06T19:21:36Z")

</div>

Like most sites, user credentials are sent back to Okta via HTTPS, and this is what is securing the connection. If a bad actor is able to see decrypted HTTPS traffic for a user/device, this is likely the least of their problems…

---

<div class="post-metadata">

**Author:** ![sanchita](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@sanchita](https://devforum.okta.com/u/sanchita)\
**Post date:** [February 9, 2023, 5:24pm UTC](https://devforum.okta.com/t/username-password-encryption/23260/3 "2023-02-09T17:24:54Z")

</div>

Actually the reason is i have use the okta widget in my angular application and in the network of my application it is seen in clear text which shouldn’t be seen. So that’s the reason I want a solution for this and even it goes to okta via HTTPS but in my UI application its seen.

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [February 13, 2024, 6:13pm UTC](https://devforum.okta.com/t/username-password-encryption/23260/4 "2024-02-13T18:13:13Z")

</div>

Closed on February 13, 2024, 6:13pm UTC