Treat proxy usernames, passwords, API tokens, and whitelisted server addresses as operational secrets.

Steps

1. Store credentials in a secret manager or protected environment variables.
2. Do not commit credentials to source control.
3. Limit access to the systems and people that require it.
4. Rotate credentials after exposure or staff changes.
5. Remove unused whitelist entries and integrations.

For account-specific values, use the endpoint, port, credentials, and location shown in your MaskProxy dashboard. Do not publish proxy credentials in screenshots, tickets, or public code repositories.