# Credential

**URL:** <https://forum.uipath.com/t/credential/154774>\
**Category:** Help\
**Tags:** credentials, activities\
**Created:** [September 27, 2019, 1:33pm UTC](https://forum.uipath.com/t/credential/154774 "2019-09-27T13:33:49Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![beesheep](https://sea2.discourse-cdn.com/uipath/user_avatar/forum.uipath.com/beesheep/32/621_2.png) [@beesheep](https://forum.uipath.com/u/beesheep)\
**Post date:** [September 27, 2019, 2:34pm UTC](https://forum.uipath.com/t/credential/154774/5 "2019-09-27T14:34:57Z")

</div>

@andreus91 Well, if you are using Orchestrator you can securely store passwords in there. You use a GetAppCredentials invoke in order to retrieve it, it’s also secure. Actually depends on the infra you are using, both are secure

[Here](https://www.uipath.com/kb-articles/how-to-work-with-windows-credentials) you can learn about windows credentials activities.

Best practice is using these both activities, because you can save the user and pw in a txt file or a excel spreadsheet or hard coding it, but the best practice is to use the vault windows provide or if you are using orchestrator what I commented above, you can think about why is not a good practice to expose a sensitive pw to a code level, I mean there is nothing wrong saving it on a spreadsheet, on cell A2 but the spreadsheet needs to be secured itself with a pw, you rather use the activities that store and treat the text as secure text. [Here you can learn about it secure strings.](https://forum.uipath.com/t/convert-securestring-to-string-get-secured-credential/1704)

if this answer your question please mark it as solve.  
regards.

---

_[View the full topic](https://forum.uipath.com/t/credential/154774)._