Java 7, though, makes them a compulsory part of bytecode. Dealing with the feature requires that developers be compiler experts, and there are few of those around, Deva says.

Another way to completely eliminate the use of plain text passwords in a secure Java code base is to use some type of password service. WebSphere provides a service called Credential Vault. At runtime ...