To maximize the security, Jenkins has the credentials plug that provides a default internal credentials store, which can be used to store different types of high value credentials example- Username with a password, SSH username with the private key, AWS bucket deployment username/password combination and Git user token, Jenkins Build Token, Secret File/Text. Jenkins credentials plugin is better than other alternative in case of configuration and patching done correctly.