VSoft.WindowsCredentialManager - Windows Credential Manager Api

[Vincent Parrett 830]

Hi All

 

I published a simple wrapper over the Windows Credential Manager Api

 

https://github.com/VSoftTechnologies/VSoft.WindowsCredentialManager

 

 

[Rollo62 566]

Thanks, nice piece of code. 👍
I have two questions:
1. You keep the secret as String in the class, wouldn't it make sense to hash it, so that at least not a simple memory dump might offer a readable password?
2. You're implemented Windows-specific, are you going to implements other platforms too ( it looks a bit like that ) ?
 

Edited March 29 by Rollo62

[Vincent Parrett 830]

Thanks

1) It's stored in the windows credential manager encrypted. It's of no use to me hashed, I'm using thing credentials to pass on to other applications - for example when talking to a website.

2) Windows Credential Manager is umm... windows only. 

Edited March 29 by Vincent Parrett
typo

[Rollo62 566]

On 3/29/2025 at 10:31 AM, Vincent Parrett said:

2) Windows Credential Manager is umm... windows only. 

Yes, of course.
My consideration was that Macos & Co might have their similar credential API worth to abstract then here under one umbrella:

Quote

Platform     Platform API / Solution
Windows    Windows Credential Manager (Credential Management API)   
                   A built-in secure vault that stores user credentials (usernames, passwords, certificates, etc.) used for network authentication and application logon.
macOS        Apple Keychain / Keychain Services   
                   Provides secure storage for passwords, cryptographic keys, certificates, and other sensitive data for macOS applications.
iOS              Apple Keychain / Keychain Services   
                   Offers secure storage of sensitive data like passwords and certificates, with support for iCloud Keychain to sync credentials across devices.
Android      Smart Lock for Passwords / Account Manager   
                   Enables secure password storage and auto sign-in; developers may also use Android’s Account Manager or Keystore system for managing accounts and cryptographic keys.
Linux           GNOME Keyring / KDE Wallet (varies by desktop environment)   
                   As far as I know, no unified API exists; desktop environments offer their own solutions (e.g. GNOME Keyring for GNOME and KWallet for KDE), while some setups may have no solution.

Nevermind, thanks for clarification.

Edited March 30 by Rollo62

[Vincent Parrett 830]

I don't use delphi for cross platform dev so didn't look at those.