Linked Questions

11
votes
4answers
5k views

What's more secure? Hard coding credentials or storing them in a database? [duplicate]

I wonder which of these things is more secure. Imagine hard coded credentials, similar to this: if user.Equals("registereduser") && (password.Equals(encryptedpassword)) { Give access to ...
2
votes
5answers
880 views

What are safe solutions to protecting important credentials in source code [duplicate]

I am doing some Java work for a company that has some code that they want protected in an application that they are giving to their customers. For example what if you have information such as FTP or ...
1
vote
2answers
951 views

How can I hide my AWS S3 access key and secret in C++? [duplicate]

I'm using AWS S3 in my C++ app to upload and download files. I've included the access key and secret in my code but I'm worried someone could read them from the binary. Is there any standard technique ...
2
votes
0answers
391 views

Hiding symmetric key inside encrypted data [duplicate]

My server generates an AES encrypted file which when downloaded acts as an input for an application. So, should I hardcode the symmetric key inside the application or should I randomly generate the ...
1
vote
2answers
225 views

Make application use encrypted credentials from a file [duplicate]

I am new to cyber security but I am working on a project where I need to use it and I don't know where to start. The application I am working on connects to Jira to retrieve data and generate ...
0
votes
1answer
83 views

Script to make schedule tasks on Windows with Admin credentials [duplicate]

I have a written a script (in R) cmd = paste0("schtasks /create /sc WEEKLY /d MON /tn ",task," /tr ",comm," /st 12:51") system(command = cmd) Where task is the name of the task and comm is the ...
1
vote
0answers
37 views

Securing data tokens [duplicate]

What is the proper way to save and access database and API credentials in my node js application? Currently I use a dotenv package and store them in a .env file. I am not uploading my code to github ...
154
votes
4answers
127k views

Where to store a server side encryption key?

I have some data that is symmetrically encrypted with a single key in my database. Rather than hard coding it into my code, I am looking for a safer way to store the encryption key. Where can I safely ...
17
votes
5answers
34k views

How can one secure a password/key in source code [duplicate]

If there is a need for source code to have a password in it, how should this be secured? This is purely an example, but say there is an app that is using an API, and you don't want to expose your ...
2
votes
3answers
6k views

Safe way to store credentials for an application

I want to use an API for one of the projects on which I am working. What's the good practice/way to store the credentials required for the API? For example, I don't want to later push the project into ...
3
votes
1answer
571 views

Storing database credentials for multi server, multi db environment

What's the best practice for storing database credentials for an auto scaling environment, yet also requiring the ability to update database information? For instance I have an auto-scaling site on ...
1
vote
2answers
253 views

Device security in IOT

I am working on an IOT device that sends data to the server after authenticating itself to the server. Is there a way to safely store my device's credentials for logging onto the main server and ...