Linked Questions

11 votes
4 answers

What's more secure? Hard coding credentials or storing them in a database? [duplicate]

I wonder which of these things is more secure. Imagine hard coded credentials, similar to this: if user.Equals("registereduser") && (password.Equals(encryptedpassword)) { Give access to ...
user3421's user avatar
  • 119
2 votes
5 answers

What are safe solutions to protecting important credentials in source code [duplicate]

I am doing some Java work for a company that has some code that they want protected in an application that they are giving to their customers. For example what if you have information such as FTP or ...
XaolingBao's user avatar
1 vote
2 answers

How can I hide my AWS S3 access key and secret in C++? [duplicate]

I'm using AWS S3 in my C++ app to upload and download files. I've included the access key and secret in my code but I'm worried someone could read them from the binary. Is there any standard technique ...
parsley72's user avatar
  • 195
1 vote
2 answers

Make application use encrypted credentials from a file [duplicate]

I am new to cyber security but I am working on a project where I need to use it and I don't know where to start. The application I am working on connects to Jira to retrieve data and generate ...
naxcuo's user avatar
  • 13
2 votes
0 answers

Hiding symmetric key inside encrypted data [duplicate]

My server generates an AES encrypted file which when downloaded acts as an input for an application. So, should I hardcode the symmetric key inside the application or should I randomly generate the ...
adnan kamili's user avatar
0 votes
1 answer

Script to make schedule tasks on Windows with Admin credentials [duplicate]

I have a written a script (in R) cmd = paste0("schtasks /create /sc WEEKLY /d MON /tn ",task," /tr ",comm," /st 12:51") system(command = cmd) Where task is the name of the task and comm is the ...
Rafael's user avatar
  • 101
1 vote
0 answers

Securing data tokens [duplicate]

What is the proper way to save and access database and API credentials in my node js application? Currently I use a dotenv package and store them in a .env file. I am not uploading my code to github ...
kabuto178's user avatar
  • 111
173 votes
4 answers

Where to store a server side encryption key?

I have some data that is symmetrically encrypted with a single key in my database. Rather than hard coding it into my code, I am looking for a safer way to store the encryption key. Where can I safely ...
Radek's user avatar
  • 1,833
17 votes
5 answers

How can one secure a password/key in source code [duplicate]

If there is a need for source code to have a password in it, how should this be secured? This is purely an example, but say there is an app that is using an API, and you don't want to expose your ...
Peter's user avatar
  • 273
2 votes
3 answers

Safe way to store credentials for an application

I want to use an API for one of the projects on which I am working. What's the good practice/way to store the credentials required for the API? For example, I don't want to later push the project into ...
mantrarush's user avatar
1 vote
2 answers

Device security in IOT

I am working on an IOT device that sends data to the server after authenticating itself to the server. Is there a way to safely store my device's credentials for logging onto the main server and ...
Abhishek Yadav's user avatar
3 votes
1 answer

Storing database credentials for multi server, multi db environment

What's the best practice for storing database credentials for an auto scaling environment, yet also requiring the ability to update database information? For instance I have an auto-scaling site on ...
TommyBs's user avatar
  • 737