title: SOAP-UI - how to externalize or encrypt passwords in a project
body: <p>I have a project with some SOAP interfaces configured to test my backends. </p>
  
  <p>To be able to transfer the credentials, I had the choice either to:</p>
  
  <ol>
  <li><p>Put a soap header <code>&lt;soapenv:Header&gt;...&lt;/soapenv:Header&gt;</code> containing username and password 
   But in this case, I have to declare it in all Request and it is not dynamic as the credentials changes for the different endpoint configured (environments)</p></li>
  <li><p>Create a <code>Outgoing WS-Security Configurations</code> for all my environment and associate them in the <code>Endpoint</code> configuration of each <code>Interface</code><br>
   That way it will switch credentials easily and automatically whatever endpoint used.
   In this configuration I can also define not to generate a <code>nonce</code>, other ways it generate it automatically and the server does not accept it.</p></li>
  </ol>
  
  <p>Now I have a <em>little</em> security problem. My SOAP-UI is in a git repository and if I just open the project xml file, I can see my passwords in clear text.</p>
  
  <p>I tried to use <code>Hashed password</code> but:</p>
  
  <ol>
  <li>The server does not allows this: it needs the password in <code>PasswordText</code> format</li>
  <li>I think the Hash is base64 encoded, then not secured</li>
  </ol>
  
  <p>Is there any way to externalize the password (they can be stored in a local plaintext file) or to be encrypted in the project.xml file?</p>
  
  <p>I am using SOAP-UI Open source version (not PRO) in version 5.2.0 and from the user interface and not with Maven or any other tool.</p>