title: DataProtectionProvider constructor protection description
body: <p>I am using the <a href="http://msdn.microsoft.com/en-us/library/windows/apps/windows.security.cryptography.dataprotection.dataprotectionprovider.aspx" rel="nofollow">DataProtectionProvider class</a> to encrypt the files in my applications local storage. But I'm having a hard time finding some solid examples/information about how to use the descriptor given in the constructor in the best way.</p>
  
  <p>The descriptor examples given on msdn are:</p>
  
  <blockquote>
    <p>"SID=S-1-5-21-4392301 AND SID=S-1-5-21-3101812"</p>
    
    <p>"SDDL=O:S-1-5-5-0-290724G:SYD:(A;;CCDC;;;S-1-5-5-0-290724)(A;;DC;;;WD)"</p>
    
    <p>"LOCAL=user" </p>
    
    <p>"LOCAL=machine" </p>
    
    <p>"WEBCREDENTIALS=MyPasswordName"</p>
    
    <p>"WEBCREDENTIALS=MyPasswordName,myweb.com"</p>
  </blockquote>
  
  <p>How secure are files encrypted with "LOCAL=user"? Can any application decrypt them as long as the same user is using the app?</p>
  
  <p>How do I use "WEBCREDENTIALS=MyPasswordName"? Can I use a password from the password vault?</p>