diff --git a/DigitalData.Core.Abstractions/Security/ICryptFactory.cs b/DigitalData.Core.Abstractions/Security/ICryptFactory.cs
index d903b81..2903775 100644
--- a/DigitalData.Core.Abstractions/Security/ICryptFactory.cs
+++ b/DigitalData.Core.Abstractions/Security/ICryptFactory.cs
@@ -6,7 +6,7 @@ namespace DigitalData.Core.Abstractions.Security
     {
         public int KeySizeInBits { get; init; }
 
-        public string PbePassword { get; init; }
+        public string PbePassword { init; }
 
         public PbeEncryptionAlgorithm PbeEncryptionAlgorithm { get; init; }
 
diff --git a/DigitalData.Core.Security/CryptFactory.cs b/DigitalData.Core.Security/CryptFactory.cs
index aa9dc63..8df2214 100644
--- a/DigitalData.Core.Security/CryptFactory.cs
+++ b/DigitalData.Core.Security/CryptFactory.cs
@@ -11,7 +11,7 @@ namespace DigitalData.Core.Security
 
         public int KeySizeInBits { get; init; } = 2048;
 
-        public string PbePassword { get; init; } = Secrets.PBE_PASSWORD;
+        public string PbePassword { private get; init; } = Secrets.PBE_PASSWORD;
 
         public PbeEncryptionAlgorithm PbeEncryptionAlgorithm { get; init; } = PbeEncryptionAlgorithm.Aes256Cbc;
 
diff --git a/DigitalData.Core.Security/Secrets.cs b/DigitalData.Core.Security/Secrets.cs
index ba4ce6a..9774ec1 100644
--- a/DigitalData.Core.Security/Secrets.cs
+++ b/DigitalData.Core.Security/Secrets.cs
@@ -1,4 +1,6 @@
-namespace DigitalData.Core.Security
+using System.Text.Json.Serialization;
+
+namespace DigitalData.Core.Security
 {
     public static class Secrets
     {
@@ -6,6 +8,7 @@
 
         public static readonly Version Version = new (1, 0);
 
-        public static readonly string PBE_PASSWORD = "9mk@i/$QY&Mw@_--dI^ahlXpNKEtv_U-,V-46b19_-Z6-U_*89_n1_-5-r-_+_$_IY_mYQl-";
+        [JsonIgnore]
+        internal static readonly string PBE_PASSWORD = "9mk@i/$QY&Mw@_--dI^ahlXpNKEtv_U-,V-46b19_-Z6-U_*89_n1_-5-r-_+_$_IY_mYQl-";
     }
 }
\ No newline at end of file