Encrypt

Encrypt sensitive information in transmission and in your databases so they can’t be read outside the context you control. Protect connect strings just as securely as you protect the database. Use strong passwords for your database and change them frequently. No one ever needs to type these passwords so make them secure. Store databases outside the directory containing your pages.