Enable secret password provides encryption automatically using MD 5 hash algorithm. The enable password does not provide an encrypted password and can be viewed in clear text in the running configuration.
To encrypt the enable password, use the service password-encryption command. It provides better security by storing the enable secret password using a nonreversible cryptographic function.
The added layer of security encryption provides useful in environments where the password crosses the network or is stored on a TFTP server. It is stored in encrypted form in the router's configuration mode of the router.
Refer to curriculum topic: 2.2.2
The enable secret command encrypts the password that is required for entering the privileged executive mode of a router or switch. Encrypting the password prevents the password from being saved in plain text in the configuration file.
*##**##*
