I keep mine in UD Codes, so it’s not directly visible.
You can encrypt them too, but still easy to go get if you are inside the system.
try
{
byte[] key = System.Text.ASCIIEncoding.ASCII.GetBytes("ShitShitShitShit");
byte[] iv = System.Text.ASCIIEncoding.ASCII.GetBytes("FireFireFireFire");
output1 = Epicor.Security.Cryptography.Encryptor.EncryptToBase64String("Hello World!", key, iv);
output2 = Epicor.Security.Cryptography.Encryptor.DecryptToString(output1, key, iv);
}
catch (Exception ex)
{
output1 = ex.Message;
}