Fundamentals of DevOps and Software Delivery » FAQ
How do I store passwords securely?
Secure credentials and web identity setup rely on three fundamentals: strong secret storage, correct DNS configuration, and properly managed TLS certificates. Automate renewal and rotation to avoid preventable outages and breaches.
Practical guidance
- Store passwords and secrets in dedicated managers, never in source control.
- Use DNS records and domain ownership controls with clear change workflows.
- Automate certificate issuance and renewal with monitored expiration alerts.
- Enforce HTTPS and strong cipher/TLS policies across all public endpoints.
Relevant chapters from the book