# What is an acceptable way to store the secret?

**URL:** <https://forums.eveonline.com/t/what-is-an-acceptable-way-to-store-the-secret/220489>\
**Category:** Third Party Developers\
**Created:** [February 17, 2020, 11:47pm UTC](https://forums.eveonline.com/t/what-is-an-acceptable-way-to-store-the-secret/220489 "2020-02-17T23:47:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Knorkor](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/knorkor/32/318409_2.png) [@Knorkor](https://forums.eveonline.com/u/Knorkor)\
**Post date:** [February 17, 2020, 11:47pm UTC](https://forums.eveonline.com/t/what-is-an-acceptable-way-to-store-the-secret/220489/1 "2020-02-17T23:47:45Z")

</div>

Was toying around with Python and EveApi for excrements and giggles. It works nicely, however, one issue remains. How are you going to deliver your application to the end user with the secret in the files? A sqlite database is not good enough to store it. Anyone knowing a little bit about Python and SQL can get it out. Even if I store a parity bit field in a DLL and the other bit half in my python script, at some point I need to construct the secret.

So, what is an acceptable way to store it in the eyes of CCP? Should I avoid Python? Use something that can be obfuscated better like C++? Use a sqlite db and pray? I really don’t want to pay for a server in the long run.

---

<div class="post-metadata">

**Author:** ![Blacksmoke16](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/blacksmoke16/32/376589_2.png) [@Blacksmoke16](https://forums.eveonline.com/u/Blacksmoke16)\
**Post date:** [February 18, 2020, 12:03am UTC](https://forums.eveonline.com/t/what-is-an-acceptable-way-to-store-the-secret/220489/2 "2020-02-18T00:03:13Z")

</div>

Checkout [https://docs.esi.evetech.net/docs/sso/native\_sso\_flow.html](https://docs.esi.evetech.net/docs/sso/native_sso_flow.html). The OAuth flow is different for desktop apps which i’m assuming you’re talking about.

---

<div class="post-metadata">

**Author:** ![Knorkor](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/knorkor/32/318409_2.png) [@Knorkor](https://forums.eveonline.com/u/Knorkor)\
**Post date:** [February 18, 2020, 12:09am UTC](https://forums.eveonline.com/t/what-is-an-acceptable-way-to-store-the-secret/220489/3 "2020-02-18T00:09:18Z")

</div>

Ah okay. Thanks. Was following an older tutorial. Gonna work through that tomorrow :).

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/eveonline/original/3X/4/1/41ec4921cbaca7a6f9ea556e7cc20018461eae5e.png) [@system](https://forums.eveonline.com/u/system)\
**Post date:** [May 18, 2020, 12:09am UTC](https://forums.eveonline.com/t/what-is-an-acceptable-way-to-store-the-secret/220489/4 "2020-05-18T00:09:20Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.