How Secure is credentials stiored in Power query for API POST requests

[vpshamsbi]

Hi,

We are using an API as data source for PBI. The API uses POST method to authenticate with username and password in the body of the initial request, which retrieves a token. The token is then used in the header of subsequent API calls to get data (again using GET).

How secure is this approach as credentials are hardcoded.

Could you recomend any solutions on how to better handle these credentials ?

Thanks

[lbendlin]

store your credentials in a file on a sharepoint with very limited access.  Then use that file data source as an expression in your Power Query.

[vpshamsbi]

Thanks. Could you please elaborate on this, even if the file kept on sharePoint, once loaded in to Power BI, data (credentials) will sit in the model , it will not be encrypted right as?

[lbendlin]

No, if you load it as an expression (rather than a partition) it will not be stored in the Power BI model.