# Enabling password encryption

In Talend ESB, most of the security relevant properties, like passwords, are stored as configuration files in etc/\*.cfg files and are loaded by Karaf using the OSGI ConfigAdmin. To avoid storing them as clear text properties in Talend ESB, but also for CXF key stores and general property files not managed by OSGI, Talend provides encryption capabilities, based on Jasypt, to encrypt and decrypt them on the fly, before being used by the ESB components.

In the following sections, you will find how you can configure your Talend ESB Container to be able to encrypt and decrypt your security properties. Encrypted property values are generally wrapped in a ENC() function.

### In this section

* [Encrypting clear text parameters and passwords](https://help.qlik.com/talend/en-US/esb-container-administration-guide/8.0/encrypting-clear-text-parameters-and-passwords)
* [Encrypting passwords for Data Services and Routes](https://help.qlik.com/talend/en-US/esb-container-administration-guide/8.0/encrypting-passwords-for-data-services-and-routes)
* [Encrypting passwords of system users](https://help.qlik.com/talend/en-US/esb-container-administration-guide/8.0/encrypting-passwords-of-system-users)
* [OSGI Configuration Parameters for Blueprint Components](https://help.qlik.com/talend/en-US/esb-container-administration-guide/8.0/osgi-configuration-parameters-for-blueprint-components)
* [OSGI Configuration Parameters for Spring Components](https://help.qlik.com/talend/en-US/esb-container-administration-guide/8.0/osgi-configuration-parameters-for-spring-components)
* [Encrypting passwords in CXF crypto property files](https://help.qlik.com/talend/en-US/esb-container-administration-guide/8.0/encrypting-passwords-in-cxf-crypto-property-files)
* [Encrypting Jackrabbit Configuration](https://help.qlik.com/talend/en-US/esb-container-administration-guide/8.0/encrypting-jackrabbit-configuration)