VSoft.WindowsCredentialManager - Windows Credential Manager Api

[Vincent Parrett 830]

Hi All

 

I published a simple wrapper over the Windows Credential Manager Api

 

https://github.com/VSoftTechnologies/VSoft.WindowsCredentialManager

 

 

[Rollo62 563]

Thanks, nice piece of code. 👍
I have two questions:
1. You keep the secret as String in the class, wouldn't it make sense to hash it, so that at least not a simple memory dump might offer a readable password?
2. You're implemented Windows-specific, are you going to implements other platforms too ( it looks a bit like that ) ?
 

Edited Saturday at 08:35 AM by Rollo62

[Vincent Parrett 830]

Thanks

1) It's stored in the windows credential manager encrypted. It's of no use to me hashed, I'm using thing credentials to pass on to other applications - for example when talking to a website.

2) Windows Credential Manager is umm... windows only. 

Edited Saturday at 11:53 AM by Vincent Parrett
typo

[Rollo62 563]

On 3/29/2025 at 10:31 AM, Vincent Parrett said:

2) Windows Credential Manager is umm... windows only. 

Yes, of course.
My consideration was that Macos & Co might have their similar credential API worth to abstract then here under one umbrella:

Quote

Platform     Platform API / Solution
Windows    Windows Credential Manager (Credential Management API)   
                   A built-in secure vault that stores user credentials (usernames, passwords, certificates, etc.) used for network authentication and application logon.
macOS        Apple Keychain / Keychain Services   
                   Provides secure storage for passwords, cryptographic keys, certificates, and other sensitive data for macOS applications.
iOS              Apple Keychain / Keychain Services   
                   Offers secure storage of sensitive data like passwords and certificates, with support for iCloud Keychain to sync credentials across devices.
Android      Smart Lock for Passwords / Account Manager   
                   Enables secure password storage and auto sign-in; developers may also use Android’s Account Manager or Keystore system for managing accounts and cryptographic keys.
Linux           GNOME Keyring / KDE Wallet (varies by desktop environment)   
                   As far as I know, no unified API exists; desktop environments offer their own solutions (e.g. GNOME Keyring for GNOME and KWallet for KDE), while some setups may have no solution.

Nevermind, thanks for clarification.

Edited Sunday at 12:29 PM by Rollo62

[Vincent Parrett 830]

I don't use delphi for cross platform dev so didn't look at those.