Hi. I have created a custom password field on employee record. I have entered a password in it, saved the record. Using the search, I am able to get the encrypted value of this password. I have created a suitelet with username and password field. I am entering the same value of the password in this field, getting it in the POST request and encrypting it using:

var hash = nsCrypto.createHash({
   algorithm: nsCrypto.HashAlg.SHA1
});
hash.update({  input: password, });
var hashedVal = hash.digest({ outputEncoding: nsEncode.Encoding.UTF_8});

But the hashedVal is different than the encrypted value return in the search result. Am I missing something?

that doesnt sound like the correct way to use a password field, nor is it considered a modern way to store a password in general

Why? Password field is available by NetSuite.

take a look at the Table of Custom Field Type Descriptions for how to use a password field

But I am doing almost the same

thats not what the help guide will tell you to do

The password field gives the encrypted value when we load/search the record, right?

it might be, but netsuite doesnt share how its encrypted

Oh... so what do you suggest?

and you should not use sha1

See the help page says the same: "When validating, you pull the encrypted password value into a hidden field and use custom code to encrypt the value the user typed and compare it with the actual encrypted value." I am pulling the encrypted password value (using search). and I am using custom code to encrypt the value the user typed in the Suitelet.

how do you

pull the encrypted password value into a hidden field

Instead of pulling it in hidden field, I am pulling in Suitelet using search.

thats literally what i am telling you not to do

Okay, so I will add the password into the hidden field on the Suitelet, right?

custom field on the employee record

custom text field on employee record and not custom password field?

correct

Okay, i got your point. Take the plain text password and store it in another field after manually encrypting it. Then use the same encryption method on the value I am getting from Suitelet.

grab your third opinion then

Password field does not display any value.

as in you only use it because it obscures the input

password is encrypted and then saved in that field.

its encrypted in an unknown way, so its lost to you

got it. Thanks.