Fundamentals of DevOps and Software Delivery » FAQ

How do I store passwords securely?

Secure credentials and web identity setup rely on three fundamentals: strong secret storage, correct DNS configuration, and properly managed TLS certificates. Automate renewal and rotation to avoid preventable outages and breaches.

Practical guidance

  • Store passwords and secrets in dedicated managers, never in source control.
  • Use DNS records and domain ownership controls with clear change workflows.
  • Automate certificate issuance and renewal with monitored expiration alerts.
  • Enforce HTTPS and strong cipher/TLS policies across all public endpoints.

Relevant chapters from the book