We're building an application that needs to log into a website using built-in credentials. It's not optimal to say the least, but we're stuck with "knowing" the username and password beforehand (hence stick them into the application somehow) and can not rely on runtime user information.
So I went through this stack overflow article which basically represents my case and the answer seems to indicate that best possible approach is to at least encrypt the password with a known key and to store this key in the application in an obfuscated way. My follow up question now is: How do I best obfuscate this key so that it isn't visible in a file dump of the executable? Are there best practices for that as well?