title: Keeping production credentials / secrets safe on Microsoft Azure and Team Foundation Server
body: <p>We are using TFS for our Microsoft Azure application. In that application, we have  Production, Staging and Local environments. Until now I was the only developer in the project, so we didn't have any problem with the security of credentials in development environment.</p>
  
  <p>Our target is to keep production credentials safe and out of the reach of other developers. What is the best practice to do this on Microsoft Azure and Team Foundation Server Online?</p>
  
  <p>Thanks.</p>
  
  <p>Edit:</p>
  
  <p>I'm keeping that secrets in "ServiceConfiguration" files of Azure:
  <img src="https://i.stack.imgur.com/9C3mo.png" alt="enter image description here"> </p>
  
  <p>Is it possible to keep ServiceConfiguration.Cloud.cscfg file exclusively available to a few person or a group in TFS? Maybe that can fix the issue. Because all secrets of Production env. are in it.</p>