WindowsCredentialManagerAPI 1.0.0

WindowsCredentialManagerAPI

A .NET library that provides managed access to the Windows Credential Manager for storing, retrieving, enumerating, and deleting credentials securely.
It wraps the native Win32 Credential APIs (advapi32.dll) and offers a clean C# API with support for SecureString.

✨ Features

• Save credentials (username + password) to the Windows Credential Manager
• Retrieve credentials as plain text (NetworkCredential) or as secure (SecureNetworkCredential)
• Delete credentials
• Enumerate all stored credentials with optional filter
• Check if a credential exists
• Supports multiple CredentialType and CredentialPersistence modes
• Handles memory securely (clears sensitive buffers, supports SecureString)

📦 Installation

dotnet add package WindowsCredentialManagerAPI
🚀 Quickstart
csharp
Code kopieren
using WindowsCredentialManagerAPI;

// Save a credential
WindowsCredentialManager.SaveCredential(
    target: "MyApp/Api",
    username: "testuser",
    password: "SuperSecretPassword123!"
);

// Retrieve a credential
var cred = WindowsCredentialManager.GetCredential("MyApp/Api");
if (cred != null)
{
    Console.WriteLine($"Username: {cred.Username}, Password: {cred.Password}");
}

// Delete a credential
WindowsCredentialManager.DeleteCredential("MyApp/Api");
With SecureString
csharp
Code kopieren
using System.Security;
using WindowsCredentialManagerAPI;

var securePwd = new SecureString();
foreach (char c in "SuperSecretPassword123!")
    securePwd.AppendChar(c);
securePwd.MakeReadOnly();

WindowsCredentialManager.SaveCredential(
    target: "MyApp/ApiSecure",
    username: "secureuser",
    securePassword: securePwd
);

var secureCred = WindowsCredentialManager.GetSecureCredential("MyApp/ApiSecure");
if (secureCred != null)
{
    Console.WriteLine($"Username: {secureCred.Username}, SecurePasswordLength: {secureCred.Password.Length}");
    secureCred.Dispose(); // cleans up SecureString
}
🔧 API Overview
SaveCredential(target, username, password, type, persistence)

SaveCredential(target, username, SecureString securePassword, type, persistence)

GetCredential(target, type) → NetworkCredential

GetSecureCredential(target, type) → SecureNetworkCredential

DeleteCredential(target, type)

EnumerateCredentials(filter) → List<CredentialInfo>

CredentialExists(target, type)

🔒 Security Notes
All passwords stored in Credential Manager are protected by Windows’ Data Protection API (DPAPI).

This library ensures that sensitive byte arrays are cleared from memory after use.

Prefer using SecureString APIs when possible.