How secure is credential manager storage

Started by Mkn

Mkn

How secure is credential manager storage   17 February 2020, 22:16

Does the credential manager use a secure form of storage such as DPAPI?
SoftPerfect Support forum - Andrew avatar image

Re: How secure is credential manager storage   18 February 2020, 13:41

Not really. Instead, any user-supplied passwords are scrambled with a simple XOR-based algorithm. They do not appear as plain text.

The reason we don't use DPAPI for secure storage is that it would create problems with the portable version and config files shared between systems. For example, if the data was encrypted on system A and the config is then opened on system B, the scanner will not be able to read it.

Generally, if it is a concern, we recommend using the portable version and place it into an EFS-encrypted folder or a BitLocker container.

Reply to this topic

Sometimes you can find a solution faster if you try the forum search, have a look at the knowledge base, or check the software user manual to see if your question has already been answered.

Our forum rules are simple:

  • Be polite.
  • Do not spam.
  • Write in English. If possible, check your spelling and grammar.

Author:

Email:

Subject

A brief and informative title for your message, approximately 4–8 words:

     

Spam prevention: please enter the following code in the input field below.

 **     **  **     **  ********   **    **   ******   
  **   **    **   **   **     **   **  **   **    **  
   ** **      ** **    **     **    ****    **        
    ***        ***     ********      **     **   **** 
   ** **      ** **    **     **     **     **    **  
  **   **    **   **   **     **     **     **    **  
 **     **  **     **  ********      **      ******   

Message: