# securityMechanism=value attribute

#### Function

Specifies a security mechanism for client access to the Network Server. The value is numeric.

Valid numeric values are:

- `8`, which specifies Strong Password Substitute security. If you specify this mechanism, a strong password substitute is generated and used to authenticate the user with the network server. The original password is never sent in any form across the network.
- `9`, which specifies Encrypted UserID and Encrypted Password security. If you specify this mechanism, both the user ID and the password are encrypted. See "Enabling the encrypted user ID and password security mechanism" in the Derby Server and Administration Guide for additional requirements for the use of this security mechanism.
- `3`, which specifies Clear Text Password security. Clear Text Password security is the default if you do not specify the securityMechanism attribute and you specify both the user=userName and password=userPassword attributes.
- `4`, which specifies User Only security. User Only security is the default if you do not specify the securityMechanism attribute and you specify the user=userName attribute but not the password=userPassword attribute.

#### Combining with other attributes

The securityMechanism attribute must be combined with the user=userName attribute.

#### Example

    -- specify Strong Password Substitute security
    jdbc:derby://localhost/mydb;user=myuser;password=mypassword;securityMechanism=8

Parent topic: Setting attributes for the database connection URL