I'm new within the area of crypto so I apologise if I am bad at explaining this. So correct me if I've misunderstood anything.
I'm currently developing a Java Fx application that includes the use of a 'remember password' option.
The password needs to be reversible. So, in this case, I need to use encryption (I know hash + salt (e.g. using Bcrypt) is better but I cannot do that without the user having to enter their password every login).
I'm just wondering what the best way to achieve this is.
For example, I could create a Java KeyStore to store a key pair and then store the password encrypted elsewhere in a configuration file. But I'm not sure how to go about storing the password for the KeyStore. Also, I'd need to encrypt the private key right? And would need to secure the passphrase for the private key?
Does anyone have any advice on a good, secure method to handle this? It doesn't have to be the way I have explained (using JKS) - I'm open to alternative approaches.