Sensitive Data In Memory
问题 I'm working on a Java password manager and I currently have all of the user's data, after being decrypted from a file, sitting around in memory at all times and stored plainly as a String for displaying in the UI etc. Is this a security risk in any way? I'm particularly concerned with someone "dumping" or reading the computer's memory in some way and finding a user's naked data. I've considered keeping all sensitive pieces of data (the passwords) encrypted and only decrypting each piece as