Passwords chosen by users are generally insecure for use directly as encryption keys. Cryptographic algorithms require keysPassword encryption is the act of a specific length, and sometimes require other attributes, such assecuring a specific paritypassword with another password. More importantly, however, passwords require additional processingIf your intent is to stop attackers from quickly testing large numbersuse passwords for authentication (e.g. for logins), you should look at hashing instead of likelyencryption. Use this tag for question about how or better still whether to encrypt passwords.
PasswordA critical but non-based encryption uses an encryption key derived from a password. Usually thetechnical problem with password encryption is meantthat legal non-repudiability of transactions is lost, because it ceases to be remembered, and entered with a keyboardtrue that only the password holder could have executed the transaction.
Secure This alone should be enough to disqualify password-based encryption techniques are computationally intensive to thwart dictionary attacks, and resist pre-computation by including an unpredictable "salt" in the derivation processfrom use almost anywhere.
