Find hard-coded password strings in project's code - Can it be done automatically?

[nitzanO]

Hey,

I have a very big project with thousands and thousands of code lines. Until now we have used hard-coded passwords

and we wish to stop. The problem is how detect all the places in the code where we used hard-coded passwords - Do

you know a way of doing it automatically?

If there is a free or not-free program that you know that can help it will be good.

Thanks alot!

[sdhalepaska]

This is a function of your editor and not really java specific.

[chaarmann]

You can use a regular expression in any editor (jEdit, eclipse, Notepad+, etc.) and then search with option "find in all files"

If you know the passwords, you can list them like
"password1|pass word2|password3 "

If you don't know, you can search everything like
"\w+"