Windows

Credential Management

• Never hardcode passwords in scripts — use Windows Credential Manager:

  # Store
  cmdkey /generic:"MyService" /user:"admin" /pass:"secret"
  # Retrieve in script
  $cred = Get-StoredCredential -Target "MyService"
  

• For scripts, use Get-Credential and export securely:

  $cred | Export-Clixml -Path "cred.xml"  # Encrypted to current user/machine
  $cred = Import-Clixml -Path "cred.xml"
  

Silent Failures