Hi,
I'm fetching information from an external API .the user name and password for the API authentication different for each Zoho user. 

What is the right way to store user/password information so i can use this for the logged in user?

Where should i store key & secret for the API?

Thanks