What are the alternatives to storing the password in code?

Question

C++ / C#

Your programs have to store passwords and keys in code to connect to a server or encrypt/decrypt data in ROM. Having stumbled upon an article about how dangerous it is, I wondered: what are the alternatives? If in the context of microcontrollers there are sometimes hardware features, then what about, for example, on Linux or Android?

Answer 1

If you want to store the password locally (I don’t know about microcontrollers), that is, there is such a thing as a TPM module , you can also see the answers to this question How to store the encryption key for desktop applications? .

Answer 2

Depends on the controller. Most microcircuits support Lock-Bit - after which it is almost impossible (or very difficult) to read the firmware as a programmer.