<div>
In my opinion, app.config is the place to put your connection strings. &nbsp;The purpose of the app.config is for configuration settings, so it is appropriate to use app.config than putting it in a class.<br />
<br />
For encrypting app.config, check the links below:<br />
<br />
<a href="http://www.codeproject.com/KB/cs/Configuration_File.aspx" rel="ugc">http://www.codeproject.com/KB/cs/Configuration_File.aspx</a><br />
<br />
<a href="http://datacogs.com/datablogs/archive/2006/08/23/393.aspx" rel="ugc">http://datacogs.com/datablogs/archive/2006/08/23/393.aspx</a><br />
<br />

</div>


In my opinion, app.config is the place to put your connection strings.  The purpose of the app.config is for configuration settings, so it is appropriate to use app.config than putting it in a class.

For encrypting app.config, check the links below:

http://www.codeproject.com/KB/cs/Configuration_File.aspx [http://www.codeproject.com/KB/cs/Configuration_File.aspx]

http://datacogs.com/datablogs/archive/2006/08/23/393.aspx [http://datacogs.com/datablogs/archive/2006/08/23/393.aspx]



<div>
Check below link for Securing Data Layer in C# Application.<br />
<br />
<a href="http://stackoverflow.com/questions/1214621/securing-your-data-layer-in-a-c-application" rel="ugc">http://stackoverflow.com/questions/1214621/securing-your-data-layer-in-a-c-application</a>
</div>


Check below link for Securing Data Layer in C# Application.

http://stackoverflow.com/questions/1214621/securing-your-data-layer-in-a-c-application [http://stackoverflow.com/questions/1214621/securing-your-data-layer-in-a-c-application]

<div>
also check <a href="http://emoreau.com/Entries/Articles/2009/05/Using-the-ConnectionStrings-section-of-the-configuration-file.aspx" rel="ugc">http://emoreau.com/Entries/Articles/2009/05/Using-the-ConnectionStrings-section-of-the-configuration-file.aspx</a>
</div>


also check http://emoreau.com/Entries/Articles/2009/05/Using-the-ConnectionStrings-section-of-the-configuration-file.aspx [http://emoreau.com/Entries/Articles/2009/05/Using-the-ConnectionStrings-section-of-the-configuration-file.aspx]

<div>
<div class="content wysiwyg-content">
What is the best practise for storing and securing SQL Server connection strings in window desktop applications? &nbsp;Is it better to store in the app.config or maybe a separate class. &nbsp;Also, is there any way to encrypt or secure the connection string? &nbsp;
</div>
</div>


What is the best practise for storing and securing SQL Server connection strings in window desktop applications?  Is it better to store in the app.config or maybe a separate class.  Also, is there any way to encrypt or secure the connection string?  

Best Practise for Storing SQL Connection Strings in C# WIndow Form Applications

C# is an object-oriented programming language created in conjunction with Microsoft’s .NET framework. Compilation is usually done into the Microsoft Intermediate Language (MSIL), which is then JIT-compiled to native code (and cached) during execution in the Common Language Runtime (CLR).