c# - Encrypt connection string in app.config

Question

I am having trouble encrypting a connection string in app.config. I have code that will protect the connectionStrings section of app.config, but the password is still displayed in plain text.

I need to encrypt the connection string in so it is not in plain text when deployed. I see similiar questions on SO for web.config, but not app.config.

Answer 1

You can easily apply the same solution as the web.config you just have to rename your app.config to web.config, encrypt with the aspnet_regiis tool and then rename it back to app.config.

1. Rename app.config to web.config
2. Open command prompt and type:
   %windir%Microsoft.NETFrameworkv2.0.50727aspnet_regiis -pef "connectionStrings" c:<folder containing your web.config> (stop at folder level and don't put the trailing "")
3. rename web.config back to app.config

You can open it in notepad to see the encrypted file. In visual studio you will see it's decrypted. You can use your connection string the same way as if it was not encrypted. (Note that it can only be decrypted on the same machine it's encrypted on.)