Take the 2-minute tour ×  I am encrypting data (health care
industry) using the aes encryption classes in the .net
framework. What are some of the recommended locations for safely
storing the key? I have it in the web.config for development,
but that does not feel production worthy, to say the least.
share|improve this question add comment  4 Answers  You can
encrypt your web.config values using built in methods in the
framework:   This is probably a reasonable place to store your
key - if somebody has managed to access your server to retrieve
these details, then you probably have bigger worries.
share|improve this answer True. Is DPAPI more "secure" though?
–  Saraz Oct 25 '10 at 14:35 @Saraz - Sorry, don't know the
answer to that... –  Paddy Oct 25 '10 at 14:46 @Saraz: More
secure than what? It's more secure in the sense "is infeasible
to recover without administrator-level access on that specific
machine" (as the encryption algo is dependent on data that are
unique to the machine). In other words, if som