Re: Where to store the DB password in a asp.net app?

From: Ken Cox [Microsoft MVP] (BANSPAMken_cox_at_sympatico.ca)
Date: 05/04/04


Date: Mon, 3 May 2004 23:04:38 -0400

Hi Darren,

If you use Integrated authentication, you'd be fairly safe in the
web.config.

Otherwise, people use the methods you outlined. This article shows some
ideas:

HOW TO: Use the ASP.NET Utility to Encrypt Credentials and Session State
Connection Strings

http://support.microsoft.com/default.aspx?scid=kb;en-us;329290

"Darren Clark" <dclark88@hotmail.com> wrote in message
news:GiAlc.10174$TT.5288@news-server.bigpond.net.au...
Basically i am curious as to where everyone stores there database details
for ASP.NET apps?

When developing controls i usually stored it in the web.config file.
Then i move it to a internal private property that is only acessable from my
DB classes.

What other methods do people use?

Encryption and then store in the webconfig? or registry? or encrypt then
registry?



Relevant Pages

  • Re: Encrypting Logon Passwords
    ... it reaches 0 the DefaultPassword is automatically removed from the registry. ... >> Therefore I've been looking at ways to encrypt and save the password ... It assigns all of the keys identified above except the ... >> I had to change my Administrator Permissions to access this key in the ...
    (microsoft.public.dotnet.security)
  • Re: Best practice for "hiding" secrets
    ... The idea is to store your credentials in a registry setting, ... Even if someone gets your app, they don't get the registry. ... to allow system admins to encrypt the credentials and store them into the ...
    (microsoft.public.dotnet.framework)
  • Re: Best practice for "hiding" secrets
    ... The idea is to store your credentials in a registry setting, ... Even if someone gets your app, they don't get the registry. ... to allow system admins to encrypt the credentials and store them into the ...
    (microsoft.public.dotnet.general)
  • Re: Best practice for "hiding" secrets
    ... The idea is to store your credentials in a registry setting, ... Even if someone gets your app, they don't get the registry. ... to allow system admins to encrypt the credentials and store them into the ...
    (microsoft.public.dotnet.security)
  • Re: Encrypting Logon Passwords
    ... > password I have to setup the following registry entries: ... > Therefore I've been looking at ways to encrypt and save the password ... It assigns all of the keys identified above except the ... > I had to change my Administrator Permissions to access this key in the ...
    (microsoft.public.dotnet.security)