# Access the user's typed password in plain text

**URL:** <https://forum.keycloak.org/t/access-the-users-typed-password-in-plain-text/16356>\
**Category:** Getting advice\
**Created:** [July 7, 2022, 2:25pm UTC](https://forum.keycloak.org/t/access-the-users-typed-password-in-plain-text/16356 "2022-07-07T14:25:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![immieszko](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/immieszko/32/6436_2.png) [@immieszko](https://forum.keycloak.org/u/immieszko)\
**Post date:** [July 7, 2022, 2:25pm UTC](https://forum.keycloak.org/t/access-the-users-typed-password-in-plain-text/16356/1 "2022-07-07T14:25:21Z")

</div>

Hello everyone,  
I have quite an unusual problem/inquiry. Is it possible to access the user’s typed password in plain text for a specific client (possibly by modifying the flow Browser in Authentication)? Finally, I would like to achieve the state:

1. User logs in, types username, and password,
2. If the User logs in to a specific client, Keycloak takes his password (before destroying it in plain text) performs the action (probably defined by custom mapper (sth like hash function with more parameters) and returns the value as attribute is scope,  
Does anyone have any suggestions on how to do this?

---

<div class="post-metadata">

**Author:** ![edewit](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/edewit/32/287_2.png) [@edewit](https://forum.keycloak.org/u/edewit)\
**Post date:** [July 12, 2022, 9:22am UTC](https://forum.keycloak.org/t/access-the-users-typed-password-in-plain-text/16356/2 "2022-07-12T09:22:34Z")

</div>

Wouldn’t that be very very insecure?