I am creating a python application which writes to SQL.
It is compiled into an .exe and distributed to other computers in the business.
(Edit: The SQL server is hosted by our business, within our intranet. The password is also required to change on occasion.)
What are some effective solutions for keeping the application's SQL password private?
- Use LDAP authentication when possible.
- Keep passwords in a sensitive_info.py file and do not commit to source control.
What are some other solutions or precautions I could consider?
Thanks @Alex and @Polynomial for the advice! Very educational! I would flag them both as answers if it would let me. I don't have the points to upvote yet, but I appreciate your help.