I am looking to create an application that aggregates data from people's online accounts.
The application (Frontend made with HTML/CSS/PHP and Backend made with Python) will log into people's accounts on various websites and grab data then send them push notifications on their device.
For websites that have an API, I will be using that, so no problem. However, a lot of these websites do not have an API.
So therefore I am going to need to store their login information somewhere, so that the script can go and login and grab the data.
This obviously, raises red flags for me. I don't want to risk people's data. What if I get hacked? I can't risk storing this information in plain text in a database somewhere.
I'm struggling to understand the best way to tackle this problem. I've looked at a few other answers to similar questions on here but I'm not sure they apply to my situation (or i'm just being stupid).
The best way I can think of doing this so far, which is not 100% foolproof but better than nothing, is to encrypt all the login information using a very secure password, and require that to be entered when the backend script is run.
Is that all I can do?