Where I can store my password on Win 2k?

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Hi,

In Windows 2000 operating system, where I can store the data secured?

For Example I want to store the password information for one of my
application. Using win32 cryptography API I have encrypted my
password. After the encryption now I want to save this password
somewhere. So that next time, I no need to remember the password. How
can I do this? Where I can store this?

I feel that by storing the value under HKCU\Software under some key
value.
But i don't know whether doing this is a secured one?

Any Thoughts, Ideas, Links related to this topic will be helpful.

Thanks & Regars,

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

You could look into using the DPapi (depending on what
versions of Windows your application is targetting).
DPapi will let you store the password in a fashion so that
it is stored per-user and accessible (transparently) only if
that user has logged into the system without the account
password having been replaced (tampered with).

Also, I would highly recommend that you review issues
relating to storing private data (such as passwords) in the
Writing Secure Code book of M. Howard (pub=MSPress).

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Pearl 2 U" <msudalai@gmail.com> wrote in message
news:96fb5b9.0501202305.60f0c436@posting.google.com...
> Hi,
>
> In Windows 2000 operating system, where I can store the data secured?
>
> For Example I want to store the password information for one of my
> application. Using win32 cryptography API I have encrypted my
> password. After the encryption now I want to save this password
> somewhere. So that next time, I no need to remember the password. How
> can I do this? Where I can store this?
>
> I feel that by storing the value under HKCU\Software under some key
> value.
> But i don't know whether doing this is a secured one?
>
> Any Thoughts, Ideas, Links related to this topic will be helpful.
>
> Thanks & Regars,