Hi Mark,

It can be done, but it would require you to not use the user.config file and instead keep all of the settings maintained directly inside your web.config file.

You can encrypt any sections of Web.config including the <appSettings section where the db connection string with user and password are stored.

This post on stackoverflow has relevant links.

Hope it helps,

Joe

Its a feature of ASP.NET not mojoPortal, ASP.NET will decrypt it automatically the first time the Web.config file is processed, this is before it gets to mojoPortal code. ASP.NET tools do the encrypting based on a machine specific key so you can't encrypt it on one machine and deploy it to another. Follow the links in the stackoverflow post for more details.

Best,

Joe