Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

How to remove or encrypt passwords in Burp Pro v2.1?

Chris | Last updated: Jul 18, 2019 11:09PM UTC

Hello, I recently switched to Burp Pro v2.1 from v1.7.34 and I can't seem to find the "Passwords" option under the "Burp" drop down menu. I can't keep test credentials in the burp project file unprotected. Where is the "Save encrypted using master password" or the "Do not save" options for Passwords in the new burp release? Thanks! Chris

Liam, PortSwigger Agent | Last updated: Jul 19, 2019 11:25AM UTC

Chris, this option has been removed in Burp 2 as it didn't provide any real security. Passwords end up stored in project files in HTTP requests regardless of this setting. The whole project file should be encrypted.

Liam, PortSwigger Agent | Last updated: Aug 12, 2019 12:42PM UTC

We've added an "unencrypted passwords" warning to user and project save functions.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.