Home/ Questions/Q 313175
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-12T08:05:01+00:00

This might be a duplicate ( question ) but I am looking specifically for

  • 0

This might be a duplicate (question) but I am looking specifically for the .NET best practice.

How to store database connection strings, username and password etc. in a safe way? Is an encrypted app.config best in most cases?

I would also like to be able to set the password in the config file and then have it encrypted as soon as the application starts. (I am not asking for a solution as I have solved this before, I’m just looking for best practise(s)).

I’m also interested in alternative solutions that you have good experiences with.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I think the best practice is to use integrated security if possible, for 2 reasons… It is the easiest solution to manage and it is the easiest solution to get right.

    If for some reason you can’t use integrated security and you have to use username and password encrypt them using something like the Enterprise Library‘s Config Manager to encrypt sections of your web.config.

    • 0