Harden your server security by encrypting sensitive database credentials (username, password, JDBC URL) in Tomcat configuration files. Features automatic runtime decryption for both DBCP2 and JDBC pools.
Encrypt almost all database resource attributes, ensuring no plain-text credentials exist in server.xml or context.xml.
Custom factories automatically decrypt values at runtime, requiring zero changes to your Java application code.
Fully compatible with standard Tomcat JDBC and DBCP2 connection pools used in high-load production environments.
Includes a dedicated command-line utility to manually encrypt and test your credential strings during server setup.