HOW TO: Encrypt the settings in your web.config
Historical article · Originally published September 22, 2003; technical details may be outdated.
We're currently looking into this subject matter, and this article was a big leap forward in our efforts:
HOW TO: Use the ASP.NET Utility to Encrypt Credentials and Session State Connection Strings