Best practices for storing logins/passwords/tokens?

Question

Information Security

Dear community, tell me what are the best practices for storing user access (logins, passwords, tokens, etc.), which are used, as an example, to access some remote API, etc.

Configuration files are not suitable (because user - dynamic record in the database). Password hashing is also not suitable, since they are later used for authentication in some remote API

Answer 1

(because the user is a dynamic record in the database)

So keep it in the database.
encrypt some AES256CBC thread and store as a base64 string

Answer 2

It is recommended to use secret vaults like Hashicorp Vault, although this is not trivial:
https://habr.com/ru/post/306812/
https://habr.com/ru/post/536694/