---
title: Avoid Hardcoded Credentials Used In Requests To An Endpoint
description: "Impact Area Security Severity High Affected Element Apex Class ## Rule ID **SF-0026** ## Impact Hardcoded credentials are a security risk. ## Remediation Do not hard code credentials in your code. Use Named Credentials and a callout endpoint. ### Time…"
url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/avoid-hardcoded-credentials-used-in-requests-to-an-endpoint/"
updated: "2025-03-21"
category: PMD Rules
---

# Avoid Hardcoded Credentials Used In Requests To An Endpoint

Impact Area

Security

Severity

High

Affected Element

Apex Class

## Rule ID

**SF-0026**

## Impact

Hardcoded credentials are a security risk.

## Remediation

Do not hard code credentials in your code. Use Named Credentials and a callout endpoint.

### Time to fix

60 min

## References

This rule is linked to [Common Weakness Enumeration CWE-259 Use of Hard-coded Password](https://cwe.mitre.org/data/definitions/259.html).