Linked Questions
12 questions linked to/from How should an application store its credentials
11
votes
4
answers
7k
views
What's more secure? Hard coding credentials or storing them in a database? [duplicate]
I wonder which of these things is more secure.
Imagine hard coded credentials, similar to this:
if user.Equals("registereduser") && (password.Equals(encryptedpassword))
{
Give access to ...
- 119
2
votes
5
answers
1k
views
What are safe solutions to protecting important credentials in source code [duplicate]
I am doing some Java work for a company that has some code that they want protected in an application that they are giving to their customers.
For example what if you have information such as FTP or ...
- 907
1
vote
2
answers
1k
views
How can I hide my AWS S3 access key and secret in C++? [duplicate]
I'm using AWS S3 in my C++ app to upload and download files. I've included the access key and secret in my code but I'm worried someone could read them from the binary. Is there any standard technique ...
- 195
1
vote
2
answers
360
views
Make application use encrypted credentials from a file [duplicate]
I am new to cyber security but I am working on a project where I need to use it and I don't know where to start.
The application I am working on connects to Jira to retrieve data and generate ...
- 13
2
votes
0
answers
394
views
Hiding symmetric key inside encrypted data [duplicate]
My server generates an AES encrypted file which when downloaded acts as an input for an application. So, should I hardcode the symmetric key inside the application or should I randomly generate the ...
- 141
0
votes
1
answer
224
views
Script to make schedule tasks on Windows with Admin credentials [duplicate]
I have a written a script (in R)
cmd = paste0("schtasks /create /sc WEEKLY /d MON /tn ",task," /tr ",comm," /st 12:51")
system(command = cmd)
Where task is the name of the task and comm is the ...
- 101
1
vote
0
answers
109
views
Securing data tokens [duplicate]
What is the proper way to save and access database and API credentials in my node js application? Currently I use a dotenv package and store them in a .env file. I am not uploading my code to github ...
- 111
175
votes
4
answers
155k
views
Where to store a server side encryption key?
I have some data that is symmetrically encrypted with a single key in my database. Rather than hard coding it into my code, I am looking for a safer way to store the encryption key. Where can I safely ...
- 1,853
17
votes
5
answers
39k
views
How can one secure a password/key in source code [duplicate]
If there is a need for source code to have a password in it, how
should this be secured? This is purely an example, but say there is an
app that is using an API, and you don't want to expose your ...
- 273
2
votes
3
answers
7k
views
Safe way to store credentials for an application
I want to use an API for one of the projects on which I am working. What's the good practice/way to store the credentials required for the API? For example, I don't want to later push the project into ...
- 21
1
vote
2
answers
526
views
Device security in IOT
I am working on an IOT device that sends data to the server after authenticating itself to the server. Is there a way to safely store my device's credentials for logging onto the main server and ...
- 113
3
votes
1
answer
886
views
Storing database credentials for multi server, multi db environment
What's the best practice for storing database credentials for an auto scaling environment, yet also requiring the ability to update database information?
For instance I have an auto-scaling site on ...
- 827