Java 7, though, makes them a compulsory part of bytecode. Dealing with the feature requires that developers be compiler experts, and there are few of those around, Deva says.

When building secure Java applications, it's important to make sure there are no plain text passwords anywhere in the code base.