You can use the Web Application Management Console to encrypt all settings in the Hyland.Web.DocPop element. When encrypted, information such as the DocPop username and password values cannot be viewed within the Web Server's Web.config file.
Encryption is enabled by the Encrypt DocPop setting in the Web Application Management Console. When this setting is applied and saved, information within the Hyland.Web.DocPop element is replaced with an EncryptedData element, which contains the encrypted settings.
For information about using the console to modify and encrypt DocPop settings, refer to the Web Application Management Console documentation.