Securing Configuration Settings


<appSettings>
    <add key="webpages:Version" value="3.0.0.0" />
    <add key="webpages:Enabled" value="false" />
    <add key="ClientValidationEnabled" value="true" />
    <add key="UnobtrusiveJavaScriptEnabled" value="true" />
</appSettings>

Create another config file like AppSettings.config and in web.config > appSettings, add configSource attribute and specify the file

<appSettings configSource="AppSettings.config"></appSettings>

This is useful in public repositories and other scenarious where you don’t want to share your other credentials but to specific people only.
Exclude the AppSettings.config from repository