title: Encrypt connection connection string or password (sqlserver CE + app windows phone)
body: <p>which would be the best way to encrypt the connection string for SQL SErver CE (Local Database) or the password-connection for a windows phone app? because if you have it in plain text, example:</p>
  
  <pre><code>"Data Source='isostore:/database.sdf';Password='mypassword';"
  </code></pre>
  
  <p>is vulnerable if anyone decompiles your app.</p>
  
  <p>But if I have the encrypted password in a file (stored in isolatedstorage) may also be vulnerable if someone decompiles the app because he can see the code to decrypt.</p>
  
  <p>Another way would be encrypt with a key that is not stored. The problem is that I dont want that the user enter each time the pin or password to access.....and if he forgets his pin or key can not access your private data. </p>
  
  <p>The data contained in the database are of basic type (contacts, tasks, ...). Data are not high risk or condifential... </p>
  
  <p>Any idea?</p>