app.config Q?

[Omegadarkest]

I have an app were I have placed a key inside the app.config file used to hash some data.
So in my debug dir I have my app and the app.config file.

Without the config I get an error the key is missing of course.

So my question is, is there any way of including this within my app so a user couldn't just pop open the xml file and read the key?

[boudino]

You can define it somewhere as constant or readonly field, but this still will be discoverable by tools like refelector, event with a little bit effort. If you want more secure storage, encrypt the key with DPAPI and store it in the config. Disadvantage of this approach is, that the key is untransferable to other machine or under other user profile.