How to use AES security?

[grester]

I've read several times the wiki pages that talk about security, cryptkey and AES but I still don't get it how you're supposed to use it.
I got a env-var for the crypt key, which at this point I don't understand if it should be plain as in "abc123" or already base64 "ksfdghsdfkgh="...
And secondly, when I edit the bot and select AES, and reinsert the password, if it automatically encrypts it for storage, or the password also needs to be entered in base64 or pre-encrypted.
I'm completely lost, that wiki part needs to be rephrased.

[JustArchi]

https://github.com/JustArchiNET/ArchiSteamFarm/wiki/Security#encryption

In order to generate encrypted password, e.g. for SteamPassword usage, you should execute encrypt command with the appropriate encryption that you chose and your original plain-text password. Afterwards, put the encrypted string that you've got as SteamPassword bot config property, and finally change PasswordFormat to the one that matches your chosen encryption method.

So, encrypt 1 yourPassword -> you get some magic encryptedText value, you put it in the config and finally change password format to 1 (same as in command).

I don't know how it can be phrased differently - if you have some idea then let me know and I can consider it.

[grester]

Oh now I get it, I completely missed that paragraph.
You see, the way I've read was:
Encryption: sees table "he's just mentioning the possible parameter values" skip
Plain text: "Not what I want" skip
AES: "This is what I want but I don't get it how he's encrypting the base64"

Maybe that paragraph should be moved instead to the AES section where is most likely to be used and is in better context.
After reading it, it was pretty easy and obvious. I did read #2658 as well, but it didn't give me enough hint.
Aside from that, maybe explaining in steps just like you did, is always easier to understand instead of such a verbose technical explained way.

Also sidetracking a bit but just to confirm, the hashing function is to be used with the IPC just like #2658 was talking about, where it doesn't need to store the password itself for reuse, just needs to save the hash, so that it matches the input login, am I right?

[JustArchi]

Yes, hashing works the same, except you just use hash command instead, and put that as IPC password and password format.

The difference is that hash is irreversible and impossible to decrypt. ASF hashes input password for IPC and compares with saved by you value. We can't do it with Steam password, as we need to send the password to Steam servers, hence why encryption works there.