Encrypting/Decrypting the Web.config file

It is highly recommended to encrypt the connectionStrings and appSettings section in the web.config file, so any sensitive information such as your database connection string, or secret encryption keys are unreadable in the file.

To encrypt this file, follow this complete guide: Encrypting Configuration Files