Passwords and Configuration Files It is so easy to embed connection strings in Web.config and App.config files. Maybe that’s the problem: It Is So Easy. App.config files are plain text, human readable, documents. They are easily read as they are plain XML formatted text files. XML Files presents security...