I save username and passwords of users in web.config (have a small number of users) like this: <authentication mode="Forms">
<forms loginUrl="Logon.aspx" defaultUrl="Default.aspx" name=".ASPXFORMSAUTH" slidingExpiration="true" cookieless="UseCookies">
<credentials>
<user name="uname" password="passw" />
</ Go to the complete details ...