Textfile as Database?

[Sidro]

Hi,

I have a couple of questions and need some advice from you experts on this one.
Instead of using MS access or MySQL for database, I was thinking of just using a plain textfile with encryption, to store a username and password. Its easier to implement and I dont have too much users. Does anyone see anything wrong with this? In terms of security?

If I were to store a username and password, using MS Access, how safe is it compared to a plain text-file with encryption? I heard that an MS Access database can be password protected, however can it also be encrypted? Which method provides the best security?

Thanks in advance.

 

[neilkonitzer]

Are your users going to be able to change their password or will this be controlled strictly by you? If the credentials would only change by you, then I would add them to the web.config file.

If the users will have the capability to change their password, then you could indeed save the credentials in a text file. For security purposes, you may want to place the file in the application /bin directory.

Neil Konitzer
Freisoft

http://www.freisoft.com