I am developing a console app that will be deployed as an azure webjob. The plan is to have it run daily, without user intervention.

I am using the PNP timer job framework, and according to their guide, the credentials should be stored in the app.config file.

Am I wrong in thinking that this is not a secure way of dealing with credentials? If so, how can I get/store credentials securely?

2 Answers 2


Yes, you can store credentials in app config file.

For better security always store it in encrypted format and while consuming in program you can decrypt it.

For encryption and decryption, you can use RSA, DES algorithm etc or you can develop your own encryption and decryption algorithm.


This is the correct way to store credential in app.config and you can then encrypt the password like the thread below:

Encrypt password in App.config

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.