How to properly store login and password for Admin in Asp.Net Identity?

Question

ASP.NET

Hello, I want to cover the site admin panel with a login and password so that only the admin can enter, for this I study Asp.Net Identity , I look at various tutorials, and I see a dangerous situation, the login and password for the admin are saved in their pure form in the Web.config file

<forms loginUrl="~/Account/Login" timeout="2880">
        <credentials passwordFormat="Clear">
          <user name="admin" password="12345"/>
        </credentials>
      </forms>

I wanted to ask how this can be avoided and where to store the standard data (login and password) for the admin? More precisely, what is the safest way to do it? Thanks

Answer 1

So this is the default value apparently. After creating a database with Asp.net Idenitty entities, the admin password can, in theory, be changed and it will be stored in encrypted form. I don't see the point in hiding the defaults here.