---
schema_version: "1"
id: bb207f0ab69c83cdb8cb89315ff49d4e9e5f30588cc765c6994dd1726d10e400
title: Encrypt from the Command Line
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/platform/data-loader-impl/guides/data-loader/loader-encryption.md
canonical_url: https://developer.salesforce.com/docs/platform/data-loader-impl/guide/loader-encryption.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 5746d229c9063e4439a75c8efbc2c8815ab3e5f65f0a020c6d400d75d7951902
products:
  - Data Loader Guide
  - Platform Developer Content
---

# Encrypt from the Command Line

Data Loader offers an encryption utility to secure passwords specified in configuration files. While Data Loader does not handle encryption directly, data in transit is encrypted when using a secure connection such as HTTPS.

**note:** The Data Loader command-line interface is supported for Windows only.

When running Data Loader in batch mode from the command line, you must encrypt the following configuration parameters:

-   `sfdc.password`
-   `sfdc.proxyPassword`

1.  Open a command prompt, and navigate to the bin subfolder of your Data Loader installation folder.
2.  Run encrypt.bat.
3.  At the command line, follow the prompts provided to execute the following actions.

    -   Generate a key: `-k [path to key file]`

        Generates a key file, and saves it in `%userprofile%\.dataloader\dataLoader.key` if the path is not specified. Store this file with care as you use it for encryption and decryption.

    -   Encrypt text: `-e <plain text> <path to key file>`

        Generates an encrypted version of the text. Provide a key file for the encryption.

    -   Decrypt text: `-d <encrypted text> <path to key file>`

        Decrypts the text using the key file.