Fortinbra 37 Posting Whiz in Training

I've searched the net high and wide for the answer, and yet came up with nothing. Right now, in out web.config file, we have our database connectivity stored in 2 different ways. We have our connection string, and we have it broken up into parts in our application settings. Crystal Reports is using the separated version, building it's own connection object, and then connecting to the database. We need to increase the security of our files, and one way we were told to do so was to remove all plain text password storage. I know that you can obfuscate your connection string in your web.config file, but doing the same with the application settings? If there is a way to do so, or better yet, a way to use the existing SQL connection string to connect to the database would be best. Anyone got any ideas?