Manual:List of MediaWiki configuration settings containing sensitive data

The following settings should generally not be kept in LocalSettings.php because they can be served as plain text under several different conditions revealing your wiki admin account to the world. For information on securing them better, see Manual:Securing database passwords. Some of these settings are from the MediaWiki core and others are from MediaWiki extensions.