How to make sure that a leaked password has been removed permanently from Jira?

[DZacA]

A password has been leaked in one comment of an issue in Jira. We have updated the comment removing that password, and we are not seeing it anymore in history log or activity, but how can we make sure that its completely gone? is there a way or any missing step that we need to do in order to be 100% sure about this? 

[Matt Doar · Accepted solution]

If it's not showing in the issue History tab you can be sure that it's not in the Jira DB any more. The other thing to do is to clone the issue and then delete the contaminated issue. If you really want to be secure then check for the data in the database backups too