A simple eight-character password can be cracked in only 37 seconds using brute force but it takes over a century to crack a 16-character one.

You can store encrypted values in your ASP.NET Core configuration file and seamlessly decrypt the values as you retrieve them. But there are, at least, two issues that you'll need to address.