how not to hardcoding database password and email addresses in web.config

thanks for your time and attention,
In web.config I have place my connection string which is containing db password and email addresses. This way it is hardcoded and user will always need a programmer if he wants to change db password and/ or email settings.
Kindly guide how I can do it without hardcoding. If I place them in db I am not getting how to place them in web.config
Pease guide me.






...