This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 95%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKR%3C/text%3E%3C/svg%3E)
How can I securely store data in Windows App SDK when other applications can access it? DPAPI doesn't offer sufficient protection and adding entropy is not enough. Where can I store the entropy? Can someone explain the mechanism for secure data storage in WinUI?
UWP being a sandboxed application had a way to save data using PasswordVault/Credential Manager, but WinUI doesn't offer the same level of security since other apps can access the data. DPAPI also doesn't provide a good way to protect the data as any app running in the same User Context can unprotect it. Adding entropy helps, but where do I store the entropy? Can somebody help me understand the mechanism for storing data securely in Windows App SDK?
UWP being a sandboxed application had a way to save data using PasswordVault/Credential Manager, but WinUI doesn't offer the same level of security since other apps can access the data. DPAPI also doesn't provide a good way to protect the data as any app running in the same User Context can unprotect it. Adding entropy helps, but where do I store the entropy? Can somebody help me understand the mechanism for storing data securely in Windows App SDK?
UWP being a sandboxed application had a way to save data using PasswordVault/Credential Manager, but WinUI doesn't offer the same level of security since other apps can access the data. DPAPI also doesn't provide a good way to protect the data as any app running in the same User Context can unprotect it. Adding entropy helps, but where do I store the entropy? Can somebody help me understand the mechanism for storing data securely in Windows App SDK?
Hi @Kirthick Raj S ,
Welcome to Microsoft Q&A!
The Windows App SDK currently does not provide APIs related to security and identity scenarios other than a few helper APIs in the Microsoft.Windows.Security.AccessControl namespace. These APIs are related to named object sharing between packaged apps and Win32 applications.
Can the encryption method in win32 meet your needs? It seems that it cannot achieve the same level of security as UWP. For the same user, other applications can access it.
Thank you.
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 92%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERL%3C/text%3E%3C/svg%3E)
Hope you've been well. Any updates about this issue? Does junejie's comment makes sense?