From a1f6f2786f4dadca327387ff31ed4a76fd11c7f4 Mon Sep 17 00:00:00 2001
From: PJ Fanning <pjfanning@users.noreply.github.com>
Date: Fri, 20 Feb 2026 19:55:49 +0100
Subject: [PATCH] Update RecordFactoryInputStream.java

---
 .../apache/poi/hssf/record/RecordFactoryInputStream.java    | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/poi/src/main/java/org/apache/poi/hssf/record/RecordFactoryInputStream.java b/poi/src/main/java/org/apache/poi/hssf/record/RecordFactoryInputStream.java
index a5cedea15d..0afa60c254 100644
--- a/poi/src/main/java/org/apache/poi/hssf/record/RecordFactoryInputStream.java
+++ b/poi/src/main/java/org/apache/poi/hssf/record/RecordFactoryInputStream.java
@@ -119,10 +119,8 @@ public final class RecordFactoryInputStream {
             return createDecryptingStream(original, pwdString);
         }
 
-        /**
-         * @since 6.0.0
-         */
-        public RecordInputStream createDecryptingStream(InputStream original, String password) {
+        // keep this private because with new API methods, we want to encourage use of char array for passwords
+        private RecordInputStream createDecryptingStream(InputStream original, String password) {
             if (password == null) {
                 password = Biff8EncryptionKey.getCurrentUserPassword();
                 if (password == null) {