ASP.Net MVC5:How to encrypt decrypt connection string in web.config

Question

Just read this article http://tutorialslink.com/Articles/Encrypt-and-Decrypt-Connection-Strings-in-Webconfig/52

they said if we use this command then connection string will be encrypted aspnet_regiis.exe -pef "connectionStrings" "<Path of the Folder containing the Web.Config file>" and say this command will decrypt the connection string aspnet_regiis.exe -pdf "connectionStrings" "<Path of the Folder containing the Web.Config file>"

but the problem is if we follow this approach it may not work when we host our web site in different pc.

so please tell me what approach we should follow to encrypt / decrypt connection string or any section in web.config which will work in any pc.

thanks in advance.

Why would you want to do that in the first place? The connection string is supposed to be hidden from the outside anyway. — Baksteen
– Baksteen, Commented Apr 13, 2018 at 12:02
i want to do it even if anyone can hack web.config they will not be able to read db connection details easily. — Mist
– Mist, Commented Apr 13, 2018 at 12:11

Baksteen · Accepted Answer · 2018-04-13 12:27:10Z

1

I don't know how sensitive your data is, but I suppose you could try the following:

Encrypt the connectionString manually first (for instance, with AES(Rijndael)).
Paste the encrypted string in your web.config.

Decrypt the string in your code, using something like this

private string getConnectionString()
{
    string encrypted = System.Configuration.
          ConfigurationManager.AppSettings["connectionString"];

    //Rijndael or any other form of decryption here...
    //.....
    //.....

    return decryptedString;
}

Use the decrypted connectionString to connect to your database! :)

answered Apr 13, 2018 at 12:27

Baksteen

1,33511 silver badges25 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Mist Over a year ago

i want to use anything in-built in asp.net which encrypt and decrypt data automatically. thanks for your reply.

Baksteen Over a year ago

Once you paste the encrypted string, you shouldn't have to worry about it :) Also, AES encryption is built right into the .NET Framework

Mist Over a year ago

the approach what you have explain that is normal encrypt decrypt operation but i am looking for something where asp.net will do it on behalf of developer. anyway thanks for your reply.

Collectives™ on Stack Overflow

ASP.Net MVC5:How to encrypt decrypt connection string in web.config

1 Answer 1

3 Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Related