Secure Storage of Data in a WinUI Application
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 95%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKR%3C/text%3E%3C/svg%3E)
Kirthick Raj S
0
Reputation points
How can I securely store data in Windows App SDK when other applications can access it? DPAPI doesn't offer sufficient protection and adding entropy is not enough. Where can I store the entropy? Can someone explain the mechanism for secure data storage in WinUI?
Windows development | Windows App SDK
{count} votes
-
Kirthick Raj S 0 Reputation points
2024-09-06T12:31:32.12+00:00 UWP being a sandboxed application had a way to save data using PasswordVault/Credential Manager, but WinUI doesn't offer the same level of security since other apps can access the data. DPAPI also doesn't provide a good way to protect the data as any app running in the same User Context can unprotect it. Adding entropy helps, but where do I store the entropy? Can somebody help me understand the mechanism for storing data securely in Windows App SDK?
-
Kirthick Raj S 0 Reputation points
2024-09-06T12:31:52.3266667+00:00 UWP being a sandboxed application had a way to save data using PasswordVault/Credential Manager, but WinUI doesn't offer the same level of security since other apps can access the data. DPAPI also doesn't provide a good way to protect the data as any app running in the same User Context can unprotect it. Adding entropy helps, but where do I store the entropy? Can somebody help me understand the mechanism for storing data securely in Windows App SDK?
-
Kirthick Raj S 0 Reputation points
2024-09-06T12:32:52.3666667+00:00 UWP being a sandboxed application had a way to save data using PasswordVault/Credential Manager, but WinUI doesn't offer the same level of security since other apps can access the data. DPAPI also doesn't provide a good way to protect the data as any app running in the same User Context can unprotect it. Adding entropy helps, but where do I store the entropy? Can somebody help me understand the mechanism for storing data securely in Windows App SDK?
-
Junjie Zhu - MSFT 21,731 Reputation points2024-09-09T08:07:33.39+00:00 Hi @Kirthick Raj S ,
Welcome to Microsoft Q&A!
The Windows App SDK currently does not provide APIs related to security and identity scenarios other than a few helper APIs in the Microsoft.Windows.Security.AccessControl namespace. These APIs are related to named object sharing between packaged apps and Win32 applications.
Can the encryption method in win32 meet your needs? It seems that it cannot achieve the same level of security as UWP. For the same user, other applications can access it.
Thank you.
-
Deleted
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2024-09-25T05:41:05.81+00:00 Hope you've been well. Any updates about this issue? Does junejie's comment makes sense?
Sign in to comment
Sign in to answer