Merge pull request #13121 from MicrosoftDocs/ghogen-patch-74

prmerger-automator[bot] · web-flow · commit f384f1a3b0b1 · 2024-09-24T22:09:37.000Z
SFI: Add security note about connection strings
diff --git a/docs/data-tools/create-a-sql-database-by-using-a-designer.md b/docs/data-tools/create-a-sql-database-by-using-a-designer.md
@@ -68,6 +68,9 @@ To complete this walkthrough, you need the **.NET desktop development** and **Da
 
 1. On the **Choose your Database Objects** page, you see a message that says the database doesn't contain any objects. Choose **Finish**.
 
+> [!CAUTION]
+> In a real application, you should store the connection string securely, as described in [Connection strings and configuration files](/dotnet/framework/data/adonet/connection-strings-and-configuration-files). For best security, use an authentication method that doesn't rely on storing a password in the connection string, such as Windows Authentication for an on-premises SQL Server database. See [Save and edit connection strings](how-to-save-and-edit-connection-strings.md).
+
 ### View properties of the data connection
 
 You can view some of the properties of the *SampleDatabase.mdf* file by opening the **Properties** window of the data connection:
