Which approach is recommended for storing sensitive credentials (e.g., API keys) in a desktop application?
-
A
Hardcode them in source code
-
B
Store them in a plain text config file
-
C
Use the OS credential store (e.g., Windows Credential Manager, macOS Keychain)
-
D
Encode them in Base64 in the binary