It is not recommended to store passwords in the connection string. And where?

Question

SQL

When developing software that connects to the database, storing passwords in the Connection String is not recommended for security reasons. I often read about this. And here is where to read about where, after all, or how, it is recommended to store passwords in a program that periodically connects to the database.
Thanks for the constructive responses.

Answer 1

Rather, not for security reasons - but for reasons of ease of management :)
Store in the configuration file.
And if a service that connects to the database is compromised, hiding access details will not save you.

Answer 2

well, for mssql in production, you can use authorization by AD user, and not by sql-login / pass.

Answer 3

Alternatively, environment variables

Answer 4

Thanks brutal_lobster Do
you have any other tips or recommendations?