As we know that String is immutable in Java if we store password as String ... is always a risk of printing plain text in log file or console but if use Array you wont print contents of array instead ...