console encrypted password

[nnn_sss22]

Hello

I want to set encrypted password for console. how i can do?  Thanks

[Julio E. Moisa]

Hi

You can configure:

conf t
service password-encryption

 it will encrypt all your current and new passwords on the device.

:-)

[nnn_sss22]

Hi

which encryption technique will use Service password-encryption? MD5 or some other. if this is using MD5  then can we change the other technique? thanks

[Mark Malone]

service password encryption is easily broken ,  its only to hash the password on the device so when someone is logged in they cant see it , it would be considered hardening the router rather than encryption , its all that's available on specific console password under line con  , if you want stronger security for logins etc use AAA and preferably an authentication server , like radius or tacacs

[nnn_sss22]

Hello

I read one article there is mention service password encryption use MD5.

MD5 easily  can broken?

[Mark Malone]

maybe they have changed it but as far as I remember it was like the enable password type 7 which could be cracked by using known websites  its only hashing to obscure the password and the enable secret is md5 and no md5 is not easily broken ,if its using md5 your

[Julio E. Moisa · Accepted solution]

Hi

As I know MD5 is used to encrypt passwords 

http://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/107614-64.html

MD5 is a one way hash it is not easy to broke, it contains 128 bits long. 2^128 possible MD5 hashes.