My app must read an SSL url from a third party. How do I best store the third party credentials in my own database, which protects the third party credentials from being com
How are the credentials being used? If their use is only triggered by the original owner (eg. you're storing a bank card number and they're making their 2nd purchase) then they can provide a password at that point which is used as your encryption key. You would then never need to store that key locally and the database content alone is useless to an attacker.