Security Architecture & DPAPI
RemoteManager was engineered with a strict zero-trust, local-first mindset. Learn how Windows Data Protection API (DPAPI) and per-connection credential mapping guarantee security without cloud dependency.
Windows Data Protection API (DPAPI)
Rather than relying on master passwords stored in plain text or hardcoded encryption keys, RemoteManager delegates cryptographic security directly to the Windows operating system via System.Security.Cryptography.ProtectedData.
Encrypted with DataProtectionScope.CurrentUser. The encryption key is dynamically derived from your logged-in Windows user session and TPM.
Every encrypted blob is salted with internal application entropy, preventing unauthorized decryption even by other processes running as the same Windows user.
byte[] cipherBytes = ProtectedData.Protect(
plainTextBytes,
entropyBytes,
DataProtectionScope.CurrentUser
);
Eliminating the Credential Overwrite Flaw
When managing enterprise server fleets, hypervisors, and jump boxes, administrators often maintain multiple administrative tiers for the same host:
CORP\AdministratorCORP\DevOpsAdminCORP\SecAuditorArchitecture Comparison
TERMSRV/10.0.0.5. Saving a second account overwrites and wipes the first!100% Local Storage & Zero Telemetry
All configuration data, group hierarchies, connection metadata, and encrypted credentials reside in a single embedded SQLite database in your user profile:
%LocalAppData%\RemoteManager\remotemanager.db🛡️ Responsible Disclosure & Security Contact
If you discover a potential vulnerability, please coordinate disclosure responsibly by reaching out directly to the Vyntech security team: