Powershell, Windows Scripts

Powershell: Convert a string into a securestring and back to plaintext

Leave a comment

Hi,

.Net and therefore the powershell has the ability to define a secure string. This means that the string is immediately deleted from memory if it is no longer needed.

Convert to secure string:
Either convert an existing variable:

1
PS D:\> $MySecurePassword=ConvertTo-SecureString -AsPlainText -Force "MyPass"

Or

1
2
PS D:\> $MyUnsecurePassVar="MyPass"
PS D:\> $MySecurePassword=ConvertTo-SecureString -AsPlainText -Force $MyUnsecurePassVar

Or read a password from command line

1
2
PS D:\> $MySecurePassword=read-host -assecurestring "Enter password"
Enter password: ******

and convert it back to plain text

1
2
3
4
5
PS D:\> $pPassPointer = [System.Runtime.InteropServices.Marshal]::SecureStringToCoTaskMemUnicode($MySecurePassword)
PS D:\> $DecryptedPass = [System.Runtime.InteropServices.Marshal]::PtrToStringUni($pPassPointer)
PS D:\> # Imported: free memory
PS D:\> [System.Runtime.InteropServices.Marshal]::ZeroFreeCoTaskMemUnicode($Ptr)
PS D:\> write-host "PASS:" $DecryptedPass

Leave a Reply