title: What is the best place to inject the db password to the default EF connection string
body: <p>The Entity data Model wizard says :</p>
  
  <p>This connection string appears to contain sensitive data (for example, a password) that is required to connect to the database. Storing sensitive data in the connection string can be a security risk. Do you want to include this sensitive data in the connection string?</p>
  
  <p>I have selected No, and I found the following generated new connection string in my Web.config:</p>
  
  <pre><code> &lt;add name="eMarket_DBEntities" connectionString="metadata=res://*/App_Code.EFModel.csdl|res://*/App_Code.EFModel.ssdl|res://*/App_Code.EFModel.msl;provider=System.Data.SqlClient;provider connection string=&amp;quot;data source=.\sqlexpress;initial catalog=eMarket_DB;user id=sa;multipleactiveresultsets=True;application name=EntityFramework&amp;quot;" providerName="System.Data.EntityClient;" /&gt;
  </code></pre>
  
  <p>Also in Web.config:</p>
  
  <pre><code>  &lt;entityFramework&gt;
  &lt;defaultConnectionFactory type="System.Data.Entity.Infrastructure.SqlConnectionFactory, EntityFramework" /&gt;
  </code></pre>
  
  <p></p>
  
  <p>How and where is the best place to pass the password in one time to be default for EF?</p>