14.4 Encrypted Passwords

Two fundamental methods for masking the passwords used in IOS configuration are the MD5 secret for enable and local user passwords, and the password-encryption service for line passwords as shown below:

As configured…
The result of the MD5 secret and password-encryption service

Note the following variations of the enable secret configuration method. When entering…

  • enable secret 0 <key> = converts a plaintext key to an MD5 secret
  • enable secret 4 <hash> = stores a SHA-256 hash parameter in configuration (already converted)
  • enable secret 5 <hash> = stores an MD5 hash parameter in configuration (already converted)