# Password Management

**Objective:**

Keep user certificate passwords safe.

**Guidelines:**

- Never store user certificate passwords in a database or in any file that others could access.
- Always use **HTTPS** so that passwords are encrypted while travelling between the user's browser and your server. This stops attackers from intercepting them.