Encrypting the AppSettings Section in the Web.config file
It is highly recommended to encrypt the “appSettings” section in the web.config file, so any sensitive information such as your Secret Keys are unreadable in the file.
To encrypt this file, follow this complete guide: Encrypting Configuration Files