developing against cloudVMs and cloud black box services (for example Azure Document DB) - makes it hard for me to safely store the passwords. Currently, I keep all my passwords for the VMs + DBs as environment variables (nothing in source control).
However, let's say someone breaks to my desktop. He can "understand" where is the code, +to see the envirnoment varialbes, +to open robomongo\mobaXterm and auto-connect - what would be the best way to secure my cloud agains hacker in MY development machine? is there like "2-phase authentication" to developer desktop various tools? hashing methods with password only I would know by heart?